Role-Based Security System
Security is very important to every multi-user application, but at the same time, it can be complex to implement, as it influences so many design decisions across an application. The eXpressApp Framework has been built from the ground up with security considerations in mind. To enable the security system in your application, add the Security Module to your application. This module allows you to use one of the following authentication strategies:
The requirements for security are seldom the same across a number of applications. We supply two security system strategies:
- Simple Security Strategy
There are two user types: a user and an administrator. Users have access to any operation with all objects, except for User objects.Administrators have access to all operations on all objects, including the User objects. 
- Complex Security Strategy
A user is assigned a role(s) that is characterized by a set of permissions.
The Security Module is agile enough to let you implement custom authentication and authorization strategies and certain classes used in them.
Of course, the Security Module works with both Windows Forms as well as ASP.NET target platforms.
Object-level and Member-level Security - Preview Version
XAF v2011 vol 2 introduces a preview of the new security model that includes the following ready-to-use permission types.
-
Type Permission - Grants access to a particular object type.
-
Member Permission - Grants access to specific members of a type.
-
Object Permission - Grants access to objects satisfying a particular criteria.
There are no denying access modifiers in permissions. This simplifies security logic and makes it easier to implement custom permissions.
To try using the new security system, see the Security Demo and read the Imporved Security System section in the documentation.
|