.NETGURU
question of security
Messages   Related Types
This message was discovered on ASPFriends.com 'aspngibuyspy' list.


Peder
Can anyone help find out why the content og the authorized roles field in
the tabs database uses a string (admin;press) to register what roles are
authorized to view the different tabs. Wouldnt it be much better to use the
Roleid (creating a string like 7;5 instead of admin;press ). That way you
would be able to change the name of a role without having to change it for
every tab. Or is there a good reason?

Greetings from Denmark

Peder

Reply to this message...
 
    
Dave VanderWekke
Human readability. It is good for debugging login issues at a single
glance.

-----Original Message-----
From: Peder [mailto:Click here to reveal e-mail address]
Sent: Thursday, August 08, 2002 7:26 AM
To: aspngibuyspy
Subject: [aspngibuyspy] question of security

Can anyone help find out why the content og the authorized roles field
in the tabs database uses a string (admin;press) to register what roles
are authorized to view the different tabs. Wouldnt it be much better to
use the Roleid (creating a string like 7;5 instead of admin;press ).
That way you would be able to change the name of a role without having
to change it for every tab. Or is there a good reason?

Greetings from Denmark

Peder

| [aspngibuyspy] member Click here to reveal e-mail address = YOUR ID
| http://www.asplists.com/asplists/aspngibuyspy.asp = JOIN/QUIT
| http://www.asplists.com/search = SEARCH Archives

Reply to this message...
 
    
Ron Novendstern
Take me off your fucking list!
----- Original Message -----
From: "Dave VanderWekke" <Click here to reveal e-mail address>
To: "aspngibuyspy" <Click here to reveal e-mail address>
Sent: Thursday, August 08, 2002 8:25 AM
Subject: [aspngibuyspy] RE: question of security

[Original message clipped]

Reply to this message...
 
    
Jesse Murray
Above and beyond that, from a database perspective I've always wondered why
security isn't handled in a link table between roles and users.

Jesse

"Dave VanderWekke" <Click here to reveal e-mail address> wrote in message
news:695288@aspngibuyspy...
[Original message clipped]

Reply to this message...
 
    
David Foderick
It should be. I think Microsoft just did it for
expediency. IBS was just meant as a proof of concept
and I think they just didn't follow their own best
practices.

--- Jesse Murray <Click here to reveal e-mail address> wrote:
[Original message clipped]

__________________________________________________
Do You Yahoo!?
HotJobs - Search Thousands of New Jobs
http://www.hotjobs.com

Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification