The tag has no usage guidance.

learn more… | top users | synonyms

3
votes
1answer
52 views

MVC Advanced Permission System Patterns [on hold]

I'm familiar with role and activity based permissions, but I'm curious about patterns that go beyond the basics. In particular, I want permissions to be granted based on the user's relationship with ...
-1
votes
0answers
58 views

Design pattern for user-roles on MVC, following SRP [closed]

I'm working on an application with 3 types of roles. Some roles may view the same data, and perform the same actions; but also differ in some other view or actions. Following SRP, I'm used to see a ...
0
votes
0answers
32 views

Cascading ACL and drill-down data architecture

I want to implement a drill-down data architecture based on the data and the ACL permissions of a user. Lets say we have data of employees of an organization and lets consider the hierarchy as ...
3
votes
2answers
89 views

Calculate different prices for different user types

I'm working on a website that, among other things, sells courses. Each course is segmented in units, to which users can subscribe but is not a requirement that they subscribe to all of them. Now the ...
1
vote
1answer
34 views

What's the proper name for type of security where we secure resources by ownerrship

I work on REST API that mixes two types of security: First you have standard role-based security - so we have multiple roles such as admin, read-only user, super user user etc. Then we have also ...
4
votes
3answers
772 views

How to securely implement Roles in a Windows Form application?

As an ISV, what is considered best practice for implementing Application Role based security? In other words, only allow users to access certain features in the application based on what Roles they ...
0
votes
1answer
61 views

Roles configuration strategy

We're close to start new project using sf2, and, probably, FosUserBundle. Keeping that in mind - what's the best strategy to define roles? App will be used by multiple divisions inside our company ...
0
votes
2answers
2k views

Custom Role Provider in ASP.NET MVC and specifically a User having multiple Roles

I have searched around and I can't find any particular answer that addresses what I am asking but no doubt it will have been mentioned already somewhere. I know that when you inherit from an abstract ...
4
votes
1answer
221 views

What Is The Relationship Between Software Architect and Team Member [duplicate]

I work for a small company which has less than 100 persons. Several months ago, this company offered me position of SA and I accepted. There are three teams in this company, and I work for one of ...
23
votes
8answers
3k views

What are the negatives of Development Managers as Scrum Masters?

It is commonly agreed that team managers should not be scrum masters, but I am struggling to see why. For context, I am an Application Development Manager with 4 devs in a Scrum Team. I come from a ...
4
votes
2answers
1k views

Best practice in application design / SQL authentication

I am currently involved in the implementation/design of an existing application for a large scale customer. The application has a similar model as e.g. vCenter Server whereby a number of components ...
0
votes
2answers
1k views

Design pattern for data privileges

I'm designing a financial system that should grant access to data based on roles and privileges. For example, a manager can see the financial transaction of users under his domain but not information ...
10
votes
6answers
4k views

What defines “software developer” role

I am a junior software developer and I have been working for a company less than a year. While I always thought being a software developer means to develop software and CODE something, my tasks are ...
6
votes
5answers
660 views

Is a coder that 'quality checks' bug fixes and bugs raised by testers a recognised role?

I've recently found myself frequently in the position where I'm checking both bug fixes by other programmers, and bugs raised by the QA team. Any bug fixes frequently end up having 'collateral ...
2
votes
1answer
175 views

Should I manage authentication on my own if the alternative is very low in usability and I am already managing roles?

As a small in-house dev department, we only have experience with developing applications for our intranet. We use the existing Active Directory for user account management. It contains the accounts of ...
4
votes
2answers
471 views

What kind of permission is this? (Groups+Roles)

I'm starting to need an access control for roles in my app. I don't know much of this, but I understand how vBulletin works: I create groups, then give permissions to groups. I think that what I ...
0
votes
1answer
906 views

C# Role Provider for multiple applications

I'm making a custom RoleProvider that I would like to use across multiple applications in the same application pool. For the administration of roles (create new role, add users to role, etc..) I would ...
3
votes
4answers
410 views

Who usually does the use case analysis in the team? [closed]

I've just started my first IT job in a team with two developers (junior and senior), a project leader and an architect. My role is not yet completely defined and I said I'd be ok with both programming ...
16
votes
5answers
13k views

In Scrum, why shouldn't the Product Owner and ScrumMaster roles be combined?

In the more traditional projects that I've worked on, the project manager (and, on larger projects, there might be associate/deputy/assistant project managers should one person be unavailable) is the ...