A DynamicData Attribute Based Permission Solution using User Roles

Articles in this Series

• Introduction - A DynamicData Attribute Based Permission Solution using User Roles.
• Part 1 - Permissions Attribute (Metadata) Classes.
• Part 2 - Sample Metadata for project.
• Part 3 - The Helper Extension Methods.
• Part 4 - Limit Tables shown on Default page and List, Edit & Details etc.
• Part 5 - Generate Columns/Rows (using IAutoFieldGenerator)
• Part 6 - Miscellaneous bits
• Part 7 - Updating the ListDetails Page
• DynamicData - Limit the Filter Fields
• DynamicData - Automatic Column Update

Introduction

This project is going to add roles based security to the new DynamicData framework (preview 12/05/2008) from Microsoft.

Solution objectives:

• Place the security metadata near to the model. This concept is fundamental to DynamicData that what you change in the model effects the site without changeing it a page level.
• Standardise the code for security and make it easy to add to a site. This will reduce the time in setting up security for a dynamic data site.
• As the starting point for the model security is already full access then the security model will follow a Deny pattern.
  • Table level permissions
    • DenyRead
    • DenyEdit
    • DenyInserts
    • DenyDelete
    • DenyDetailsView
    • DenySelectItem
  • Field level permissions
    • DenyRead
    • DenyEdit
• Control page filters via metadata. Again this will take the management of page filters to the model simplifying management of the site here.
• Add simple auditing to tables and automate its update here.
  • Created by: String ,
  • Created when: data time
  • Updated by: String
  • Updated when: data time

Useful Links

David Ebbo has a great screen cast showing how to setup Dynamic Data here.

Blogs

David Ebbo, Scott Hunter, Marcin Dobosz, DATA DEVELOPER.NET

Forum

ASP.NET Dynamic Data the best place to ask questions and get stimulated into doing more.

Preview Home

ASP.NET Dynamic Data Preview

Note: This article will assume that you know how to setup a basic DynamicData web site. It will not explain how create the different components used to make this work just how to put them together to make it work.