Custom Security

I am attempting to move an old WebService system to WCF. This system grants
each user a set of permissions. It is possible that no 2 users have the
same rights. Once a user is logged into the service, the permissions are
placed in HttpContext.Current.Session. Is there some equivalent way to
store the users profile so as not to retieve it from the DB on each call.

Example of a bit combination. A user can Save an Event if they have rights
to the Calendar and Resources they have allocated to the event.

Thanks for any help.

T

Have a look into the howto: "Create a Service that Requires Sessions"
at:

http://msdn2.microsoft.com/en-us/ms733058.aspx
and
http://msdn2.microsoft.com/en-us/ms733040.aspx


--
Happy Hacking,
Gaurav Vaish | www.mastergaurav.com
www.edujini-labs.com
http://eduzine.edujinionline.com
-----------------------------------------


"Thad Smith" <thad.smith@acstechnologies.com_NOSPAM> wrote in message
news:O$ee1emNHHA.724@TK2MSFTNGP04.phx.gbl...
>I am attempting to move an old WebService system to WCF. This system
>grants each user a set of permissions. It is possible that no 2 users have
>the same rights. Once a user is logged into the service, the permissions
>are placed in HttpContext.Current.Session. Is there some equivalent way to
>store the users profile so as not to retieve it from the DB on each call.
>
> Example of a bit combination. A user can Save an Event if they have
> rights to the Calendar and Resources they have allocated to the event.
>
> Thanks for any help.
>
> T
>