Role based authorization

Hi!

I am looking for the 'state-of-the-art' way to implement a role based
authorization (Windows security) mechanism. First, I started with the
'PrincipalPermission' attribute, but I read in the SDK documentation that
this should be done only for legacy systems. Further more if I use the
attribute I cannot define the permitted roles for each service operation in a
config file.
I read about a claims based authorization model, but I cannot find any
documentation about that.
Is there a documentation available?

Greetings from the cold Germany!

Bye, Sebastian

Hi Sebastian.
I see in the winfx documentation
Windows Communication Foundation
Windows Communication Foundation Features
InfoCard

Is that the claims based system maybe you read about?
My quick look through is coming up short on examples or a clear idea of
how that is done.

A Happy Warm New Year to you in Germany from soggy Sonoma
County-California-US -Greg

"Sebastian Kralemann" <SebastianKralemann@discussions.microsoft.com> wrote
in message news:8BB683DF-3F27-4DD6-9311-5FB9EDAB28FF@microsoft.com...
> Hi!
>
> I am looking for the 'state-of-the-art' way to implement a role based
> authorization (Windows security) mechanism. First, I started with the
> 'PrincipalPermission' attribute, but I read in the SDK documentation that
> this should be done only for legacy systems. Further more if I use the
> attribute I cannot define the permitted roles for each service operation
> in a
> config file.
> I read about a claims based authorization model, but I cannot find any
> documentation about that.
> Is there a documentation available?
>
> Greetings from the cold Germany!
>
> Bye, Sebastian

I am not sure what you are looking for. But you can check out AzM an
which is Role-based Access Control system available in newer version of
Windows Server. Ran into this introduction at Microsoft

http://msdn.microsoft.com/msdnmag/is...zationManager/

W.r.t. to infocard, the way I undestand it, you can see it as more of a
cross domain sign on with support for user data transfer between these
domain. The basic thing is work in progress and I have not run into any
tutorial that shows how to get it working completely. But check out
this http://blogs.msdn.com/andyhar/rss.aspx for more information