Tag Info

New answers tagged

0

There are two "auth" words you want to become familiar with. Authentication - which is where users provide evidence that they are who they say they are. Authorization - which is where the system allows or prevents actions attempted by an authenticated user. Both aspects are relatively easy to start with for simple solutions, and both can quickly get ...


0

Preferable any type of user action should be controlled in the same way. Administrators as just users (don't tell them I said that :-)), just with a set different set of permissions. Perhaps these permissions do not fit in the current permissions model because the model is only applied to basic database actions. A permission system involves more. Any ...


2

In the business layer you simply don't honor any update even if it does come from the UI. I guess you could also do this in the data layer but that does not mean skip it in the business layer. For that matter you could also enforce it a the database with for example triggers. In the business layer you expose a flag / property of IsEditable (or some other ...



Top 50 recent answers are included