WPF Application - Role Management Best Practices

Question

I have a WPF application with WCF service level and SQL database. Now I want to limit the elements of the application so that certain functions are available only to those users with a certain role. For example, you can only go to the settings screen if you are an administrator.

I would like the user to be a member of 1 or more authority groups and each authority group in order to have 1 or more related roles.

Once upon a time, I used AzMan (Authorization Manager) to do a similar thing. Does anyone think there are better approaches? Is AzMan "old news"? Alternatives?

Thanks.

Answer 1

I don’t think that Azman is old news, we are still using it.

Authorization permission and .Net rights, as before in AzMan

Azman will do what you ask ....

Answer 2

Well, I would do (in fact, I already did) the following.

I assume that you have your business rules (users, groups) defined in your SQL database. Thus, you can simply perform authorization at the UserControl level. Give everyone their UserControls hasAuthorization property and bind it to the isEnabled property. You can also bind it to the Visibility attribute.