Abstract to Privileges rather than to Roles in ASP.NET Applications

[EDN Admin]

Its very common to check whether the current requesting user is in a particular role in order to determine whether they are authorized to do or see something within an ASP.NET application. This approach can break down over time as the number of roles and business rules for determining authorization increase. By creating an abstraction for privileges, this issue can be easily managed.

View the full article