c# - Storing different user permissions in databse with customizations -

-

in custom user permissions, have like:

  userid        permission  11100001        viewthis  11100001        viewthat  11100002        editthis  11100003        editthat

now, want viewthis more customized, example target specific cost center, user can view employees cost center(s). added column costcenter. if it's null means user can view cost centers. problem other permissions, example viewthat needs customized well, problem customization or limitation not target cost center, target other factors, example contract type. users permission viewthat should limited employees contract type. added column contracttypeid. column should ignored in permissions field not required. permission requires 2 or more of customization/limitation fields.

the problem now, table growing horizontally whenever need add customization/limitation permission. there better way or best practice in dealing such dilemma?

there way normalize out in data model. let me show example:

enter image description here

tables user , permission clear, guess. in accessible store things want restrict access to: costcenter, contracttype, ...

from description understand want define specific combinations of accessibles , permissions (viewthis on costcenter, viewthat on contracttype, etc.). can define these combinations in accessiblepermission.

when you've got these combinations can assign them users in useraccessiblepermission.

this definition part of authorization.

the enforcement part of authorization should consist of business logic grants all permissions on all accessibles users has no specific permissions. when there specific permission, authorization changes none, except.

this 1 way go this. i'd surprised if matched requirements 100%, hope gives direction.


Comments

Post a Comment

Popular posts from this blog

c# - How Configure Devart dotConnect for SQLite Code First? -

-
can configure following sample code ? when run following code, error : no entity framework provider found ado.net provider invariant name 'devart.data.sqlite' setting in machine.config <system.data> <dbproviderfactories> <add name="dotconnect sqlite" invariant="devart.data.sqlite" description="devart dotconnect sqlite" type="devart.data.sqlite.sqliteproviderfactory, devart.data.sqlite, version=4.6.287.0, culture=neutral, publickeytoken=09af7300eec23701" /> </dbproviderfactories> </system.data> after add below block code in app.config <?xml version="1.0"?> <configuration>   <configsections> <!-- more information on entity framework configuration, visit http://go.microsoft.com/fwlink/?linkid=237468 --> <section name="entityframework" type="system.data.entity.internal.configfile.entityframeworksection, entit...
Read more

java - Copying object fields -

-
what best way of copying classes when need have 2 independent variables? have simple class: public class myclass { boolean = false; string b= "not empty"; } do need make method : assign(myclass data ) { a= data.a; b= data.b; } is there automatic method copy (duplicate) objects in java? do need make method : pretty close. instead of making method, should make constructor. such constructors called copy constructor , , create them this: myclass(myclass data) { = data.a; b = data.b; } and create copy of instance, use constructor this: myclass obj1 = new myclass(); myclass obj2 = new myclass(obj1); copy constructor can tedious : using copy constructor create deep-copy can tedious, when class has mutable fields. in case, assignment create copy of reference, , not object itself. have create copy of fields (if want deep copy). can go recursive. a better way create deep copy serialize , deserialize object. why not use clone()? ...
Read more

c++ - Clear the memory after returning a vector in a function -

-
i have function processes , stores lot of data in , returns results vector of class. amount of data stored in function tremendous , want clear storage memory of function after finished job. necessary (does function automatically clear memory) or should clear memory function? update: vector<customers> process(char* const *filename, vector<int> id) { vector<customers> list_of_customers; (perform actions) return list_of_customers; } variables defined locally within function automatically released @ end of function scope. destructors objects called, should free memory allocated objects (if objects coded correctly). example of such object std::vector . anything you've allocated new must have corresponding delete release storage. try avoid doing own allocation , use raii instead, i.e. containers or smart pointers.
Read more