Security Resources Defining, Static/Dynamic

Posted by mmontalvo on Stack Overflow See other posts from Stack Overflow or by mmontalvo
Published on 2010-06-08T22:29:27Z Indexed on 2010/06/08 22:32 UTC
Read the original article Hit count: 158

Filed under:

web-security

I am implementing a simple(hopefully) security manager within an application. Is it better to have predefined(static) roles, custom roles(dynamic)? I am leaning more towards dynamic groups or roles only because then it would not require a redeploy to update the system. Also, what would be the best approach to define resources in general? The application has a database that can hold either the static or dynamic values.

Related posts about web-security

System.Web.Security.FormsAuthentication.Encrypt returns null

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to encrypt some userData to create my own custom IPrincipal and IIdentity objects using Forms authentication - I've serialized an object representing my logged in user to Json and created my FormsAuthentication ticket like so: string user_item = GetJsonOfLoggedinUser();/*get JSON representation… >>> More
Google Releases Web Security Scanner

as seen on Devx - Search for 'Devx'
"Skipfish" helps developers test their Web apps for vulnerabilities. >>> More
Google Releases Web Security Scanner

as seen on Internet.com - Search for 'Internet.com'
"Skipfish" helps developers test their Web apps for vulnerabilities. >>> More
Web Security Threats on the Rise, Report Finds

as seen on Dot net Slackers - Search for 'Dot net Slackers'
It may not be Tony Soprano on the Web, but a new security report finds that wise-guy hackers have become increasingly organized....Did you know that DotNetSlackers also publishes .net articles written by top known .net Authors? We already have over 80 articles in several categories including Silverlight… >>> More
Web Security: Worst-Case Situation

as seen on Stack Overflow - Search for 'Stack Overflow'
I currently have built a system that checks user IP, browser, and a random-string cookie to determine if he is an admin. In the worst case, someone steals my cookie, uses the same browser I do, and masks his IP to appear as mine. Is there another layer of security I should add onto my script to make… >>> More

Developer IT

Security Resources Defining, Static/Dynamic - Developer IT

Security Resources Defining, Static/Dynamic

web-security

Related posts about web-security

System.Web.Security.FormsAuthentication.Encrypt returns null

Google Releases Web Security Scanner

Google Releases Web Security Scanner

Web Security Threats on the Rise, Report Finds

Web Security: Worst-Case Situation

Categories cloud