views:

200

answers:

3

Hello,

I have to ensure the security of a asp.net website at work. they ask me to do a role based security with the active directory of my work so i could do a sitemap and give the right acces at the right personne.

wich class of the framework should i use? make generic identity?

+1  A: 

It's already built into AD authentication. If you are authenticating against the AD, either via NTLM logins or an AD connected forms authentication setup then the thread identity will contain the groups the user belongs to, and the role based parts of the sitemap control will work.

Specifically you use the WindowsTokenRoleProvider. This is a one way role manager (you can't add people to groups - you have to use the AD tools for that. The use the sitemap's built in support for trimming site maps according to role.

blowdart
A: 

I need for every user that goes on the intranet to be looked up by the Active directory, then build the right menu depending on the roles and acces the user have.

should i use the RoleManager or a class like that?

Polo
+2  A: 

Yes, you can use a RoleManager. Have a look at http://msdn.microsoft.com/en-us/library/ms998314.aspx

NYSystemsAnalyst