Role-Based Security
Role-based security is a more traditional security model. Instead of being based on the concept of code accessing a particular resource, it is based on the concept of limiting or allowing actions as determined by a user's identity and his membership in a role group. In .NET, a principal object is used to encapsulate a user's identity and indicate to which roles he belongs.
Principals
In a sense, a principal is a sort of proxy that interacts with the security system as a representation of a user. Principals work in conjunction with identity objects. Identity objects uniquely identify users to the runtime.
There are three types of principals:
Generic—These apply to users and roles that exist outside of the concept of Windows ...
Get Visual Basic® Programmer's Guide to the .NET Framework Class Library now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
