Extending the ASP.Net Security model to use rights : Part two - the IHttpModule
In part one - IPrincipal, I talked about the right and IPrincipal objects needed to add "right" based security to asp.net applications in addition to role based security. There are a few things we need to do to get ready to build the IHttpModule. First we need something to give us a list of rights for a user. To do this we will create a quick "RightManager" class. We will create a static method "GetRightsByUserName" to return a list of Right objects for a gi...
[More]