News, examples, tips, ideas and plans.
Thoughts around ORM, .NET and SQL databases.

Friday, February 25, 2011

On security system, part 1

This is an introductory post to the security system design and implementation in DataObjects.Net. Here we'd wanted to define common terms, considerations and requirements to the upcoming security system.

Bits of theory

Almost any access control model can be stated formally using the notions of users (subjects), objects, operations, and permissions, and the relationships between these entities.
  • The term user refers to people who interface with the computer system directly or not and on behalf of whom some actions are being taken by a computer program or a process.
  • An object in terms of classic OR/M can be any entity or a group of entities accessible within the mapped database(s).
  • An operation is a standalone action invoked by the user on the objects.
  • Permissions (or privileges) are authorizations to perform some action on
    the objects. The term permission refers to some combination of object and operation.
The role-based access control model (RBAC) adds one more fundamental term to the list — a role. A role is essentially a collection of permissions. Within an organization, roles are relatively stable, while users and permissions are both numerous and may change rapidly. Controlling all access through roles simplifies the management and review of access controls, therefore we'd prefer to follow role-based security model where users receive permissions only through the roles to which they are assigned.




Another advantage of the role-based access control model is the fact that roles are initially hierarchical — roles can inherit permissions from other roles. As a result, appropriate role hierarchies can be flexibly defined for any business process workflow, for example:



As a conclusion: although any access control system has its own advantages and limitations, we've chosen the RBAC one as a base for access control model in DataObjects.Net because of its flexibility and efficiency in the most usage scenarios.

Requirements and other considerations

First of all, we don't want to reinvent the wheel (again). If any core part of the standard .NET security system can be consumed, then it should be consumed. Mainly, I imply core interfaces such as IPrincipal, IIdentity, etc. This might help to use Thread.CurrentThread.Principal property in the same way as we use Thread.CurrentThread.CurrentCulture in localization extension, as well as more tightly integrate with system authentication services.

Other considerations:
  • Security-related data mustn't be stored in serialized way in blob fields or something. It must be accessible via plain SQL.
  • If this is possible, security system should be implemented as as extension (separate assembly) to the core framework.
  • Security policy shouldn't be automatically applied to all persistent types. Only selectively chosen and configured persistent types should be subject for security system. This could be done with the help of special interface marker, attribute usage or similar.
  • Authentication part should be extensible with custom types of authentication services (LDAP, WebServices, etc.).
  • LINQ queries should be transparently re-written by security system to apply effective permissions.
  • ASP.NET membership provider should be implemented as well.

This list doesn't pretend to be complete. Something might got out from our sight. If so, please don't hesitate to post a comment.

In the next posts of the series I'll try describing several aspects of the system in more detailed manner.

70 comments:

  1. I have read lots of research papers on a topic of data security and have to say that no one has invented universal protection system for cloud repositories. I also know that today secure data room services seem to be the most reliable.

    ReplyDelete
  2. Good artcile, but it would be better if in future you can share more about this subject. Keep posting. click here to visit the website

    ReplyDelete
  3. Thanks for sharing this quality information with us. I really enjoyed reading. Will surely going to share this URL with my friends.
    Declawing Cats

    ReplyDelete
  4. I really like your take on the issue. I now have a clear idea on what this matter is all about..
    r-d1

    ReplyDelete
  5. You completed a few fine points there. I did a search on the subject and found nearly all persons will go along with with your blog.
    occupational health services definition

    ReplyDelete
  6. If more people that write articles really concerned themselves with writing great content like you, more readers would be interested in their writings. Thank you for caring about your content.
    Property Sales Marbella

    ReplyDelete
  7. I think this is a really good article. You make this information interesting and engaging. You give readers a lot to think about and I appreciate that kind of writing.
    life size batman

    ReplyDelete
  8. I can see that you are an expert at your field! I am launching a website soon, and your information will be very useful for me.. Thanks for all your help and wishing you all the success in your business.
    how does pet insurance work

    ReplyDelete
  9. I’ve been searching for some decent stuff on the subject and haven't had any luck up until this point, You just got a new biggest fan!..
    redesign4more

    ReplyDelete
  10. This is a good post. This post gives truly quality information. I’m definitely going to look into it. Really very useful tips are provided here. Thank you so much. Keep up the good worksbuy essay online

    ReplyDelete
  11. Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work. AlarmSystem.tips

    ReplyDelete
  12. Thanks for a very interesting blog. What else may I get that kind of info written in such a perfect approach? I’ve a undertaking that I am simply now operating on, and I have been at the look out for such info. AlarmSystem.tips

    ReplyDelete
  13. This is an incredibly informational article. I likewise concur with your post title and you really well light up your perspective. I am phenomenally perky to see this post. A commitment of gratefulness is with the objective for giving to us. Keep it up and share the all the more most related post. Click on for more information.

    ReplyDelete
  14. The specialists of Singapore Assignment Helpdeliver case studies assignment help services to the students who are not able to submit their assignment without missing the deadline.

    ReplyDelete
  15. This comment has been removed by the author.

    ReplyDelete
  16. You have done a great job. I will definitely dig it and personally recommend to my friends. I am confident they will be benefited from this site..
    Cheap Assignment Help

    ReplyDelete
  17. Thanks for taking the time to discuss this, I feel strongly about it and love learning more on this topic. If possible, as you gain expertise, would you mind updating your blog with extra information? It is extremely helpful for me. IT security services in Toronto

    ReplyDelete
  18. Are you detecting for best assignment help ireland so, place your assignment order on "IrelandAssignmentHelp.com" and get faultless assignment from our best qualified writing experts at fair cost.

    ReplyDelete
  19. Wow, fantastic blog layout! How long have you been blogging for?
    you made blogging look easy. The overall look of your website is magnificent, as well as the content! i am also Seo expert and provide services in
    best assignment help.

    ReplyDelete
  20. Students Assignment Help is most famous homework help service supplier around the world. Students have blind faith on our writing expert. Avail assignment writing help at reasonable price?

    ReplyDelete
  21. Thank You for providing the useful and important information, the writing sequence is so preety. Recently i am reading Mercury Retrograde 2017 Topic. this is very interesting and valuable. if you wants more information as
    Hindu Calendar, Choghadiya and Rahu Kalam, please check mpanchang.com

    ReplyDelete
  22. If you suspect any suspicious activity or if a crime occurs, you can always review the tapes. Another system you could use to deter theft is the tag and alarm system, which is formally known as electronic article surveillance (EAS).guarantor loans

    ReplyDelete
  23. Great post keep on sharing new things but if a student need homework help services then visit Myassignmenthelp services and get the best homework help writing services

    ReplyDelete
  24. Hi,
    For IT Security Services or Managed IT Services, Contact Synergy 360 Consulting Australia. Synergy 360 provides top notch strategic business advice and planning for the current IT and commercial environment. They help you to make strategic and timely decisions and successful delivery of projects or IT solutiions to manage the upcoming changes. To know more, visit https://synergy360.com.au/

    ReplyDelete
  25. This post is wonderful! Thank you for providing with such amazing content. This reminds me rashifal provided by this amazing astrology website, mPanchang. They have amazing content and information covering each and every topic in Gender Predictor. Keep up the good work!

    ReplyDelete
  26. This comment has been removed by the author.

    ReplyDelete
  27. Visit our website to get best assignment help from top leading service provider in US, UK and Australia.

    ReplyDelete
  28. This is an article which has strength in terms of information and quality. This reminds of a similar website, CMA; provider of assignment help services (all kinds). Keep the amazing work and thanks for sharing it!

    ReplyDelete
  29. I see some amazingly important and kept up to length of your strength searching for in your on the site psd to wordpress

    ReplyDelete
  30. Obviously, the principles of the organization are understudies, so costs are a key factor when settling on the choice of an administration. For this situation, we are taking a gander at an average estimated composing administration, where the allocation is $ 12.99 per page. assignmentland

    ReplyDelete
  31. Hello, Great Article Dear
    Thank you for sharing the useful information, Your website is highly effective and contains worthy content.
    I would like to introduce everyone with the best junk cleaner app for android phone which cleans junk files instantly and boost the android device.
    Download Junk Cleaner App For Android Phones Now.

    ReplyDelete
  32. Really a great addition. I have read this marvelous post. Thanks for sharing information about it. I really like that. Thanks so lot for your convene. We also provide My Assignment Help Australia.

    ReplyDelete
  33. Nice Post!! I love this post I will definately share it to my friends and also going to share on social me dia platforms. It will take a minute to see my work kindly do so.
    Falcon Super Cleaner is the best junk cleaner app for android phone which cleans junk files, cache files instantly. It covers many more features that is Antivirus For Android, Phone Booster, Battery Saver , Cpu Cooler, Duplicate Photo Cleaner and many more.
    Download Best Junk Cleaner App For Android Phone Now!

    ReplyDelete
  34. A very descriptive style of writing this amazing article.
    I guess writer has done a lot of research on this particular topic.
    Awesome writing skills shown.
    I am impressed.
    I would love to know your opinions on
    is wintonic safe

    ReplyDelete
  35. Do visit our best essay writing help from our professional experts and get desired result in your academics.

    ReplyDelete
  36. Do you know which coaching classes provides the best IAS tuition in Jaipur?
    Best IAS coaching classes Jaipur is IIIASA.
    Along with this House Of Bakchodi provides Latest news | Breaking News | World News Updates all across the world.
    In order to move from one place to another and that too with a luggage you need help of best packers and movers in jaipur

    ReplyDelete
  37. Do you know which coaching classes provides the best IAS tuition in Jaipur?
    Best IAS coaching classes Jaipur is IIIASA.
    Along with this House Of Bakchodi provides Latest news | Breaking News | World News Updates all across the world.
    In order to move from one place to another and that too with a luggage you need help of best packers and movers in jaipur

    ReplyDelete
  38. I am really touch by the gravity of the situation and how u have carved the topic so beautifully with your words. Great job, well done. Wish to read similar articles soon. Keep inspiring!
    I have been working on Falcon Super Cleaner which has been rated as one of the best cleaner app for your Android smartphone available for free download. Check out this cleaning master and decide whether you should get one for your Android phone.

    ReplyDelete
  39. This is splendid work. The idea is fresh and innovative. It has helped me understand things from a fresh outlook. I shall surely recommend it to my friends on various online platforms.

    If you have been looking around for the Best gym in Raja Park, Jaipur, but get skeptic after reading their reviews, I would suggest Fit O’ Clock. Apart from being heavily loaded with modern equipments, you get professional trainers that help you get in shape in no time. You can even choose from various training options like strength training, aerobics, yoga and zumba sessions.

    ReplyDelete
  40. Students are demnding ias academy for hindi medium students then one of the best institute is IIIASA as your training partner here you can get IAS crash course, online classes for IAS training from highly qualified experts

    ReplyDelete
  41. Thank you for your insight. It feels good to think that there are writers out there who taking the initiative to focus on this issue.
    Also, take some time out to read about the best phone cleaner and cache cleaner - fast speed booster app for your Android phone.

    ReplyDelete
  42. Hi...
    Amazing knowledge and I like to share this kind of information with my friends and hope they like it.
    I would like to address you about a similar website which provides awesome information on Adware Removal Tool.

    ReplyDelete
  43. Hey,
    I must say this is one of the best article I have seen after so many days.
    I guess Rashtriya Swayamsevak Sangh must learn from this and write awesome articles like yours.
    Also, me and my team packers and movers in salt lake should also write in this style only.
    Thanks.

    ReplyDelete
  44. Thanks for sharing such a nice piece of information to us. This is very knowledgeable for me. I am John and i am offering Assignment Help to students of Australia and all over the world.

    ReplyDelete
  45. I Loved The Way You Discuss The Topic Great Work Thanks For The Share Your Informative Post.
    Pay Someone To Do My Exam

    ReplyDelete
  46. I appreciate because this post contains much useful information. I am a professional academic writer who provide solutions to students for their assignment. Get assignment help melbourne in cheap price.

    ReplyDelete
  47. A high-standard post with all imperative information about assignment help UK services. Looking forward to availing the premium services.

    ReplyDelete
  48. Very Excellent post, this is very stunning and amazing. I just want to say thanks for your wonderful post. paper help

    ReplyDelete
  49. Online assignment help by My Assignment Services has been trusted by millions of students worldwide for over a decade. We have been providing complete academic assistance to students struggling with their college and university tasks. Whether it is an essay, dissertation, case study or any other form of assessment, you can trust us for 100% original, well-researched and referenced academic documents that ensure High-Distinction grades. An online assignment help, academic services provider such as My Assignment Services, is well-known for its 24-hour online assistance on the WhatsApp platform. Students can reach out to us with their queries at any point of the day or night and get the most effective solutions for them. Our best online academic help experts talk about how to select and evaluate the right academic sources, IT Assignment Help which will help you clear all your IT assignment-related doubts at low cost.

    ReplyDelete
  50. This post is very informative.Its a very sensible post for me. Have a look to my article on -
    What is Continue Education And Why It Matters

    ReplyDelete
  51. Online assignment help services by Sample Assignment has been trusted by many students worldwide for over a decade. Assignment Experts providing assignment help to students struggling with thier assignment tasks given by Universities. Whether it is an essay, dissertation, case study or any other form of assessment, you can trust us for 100% original and plagiarsim free content by which get HD Grades. An Australian assignment provider such as Sample Assignment, is well-known for its 24-hour online assistance on the WhatsApp platform. Students can reach out to us with their queries at any point of the day or night and get the most effective solutions for them. Our best online assignment help experts talk about how to select and evaluate the right academic sources, which will help you clear all your assignment-related doubts at best and affordable price. Whenever need to search for 'do my assignment', our experts will be assist you.

    ReplyDelete
  52. I really happy found this website eventually. Really informative and inoperative! Thanks for the post and effort! Please keep sharing more such article. I've really like your blog and inspire me in many ways. We have already set a high standard for Coursework help.

    ReplyDelete
  53. Hello
    My name is Sarah Smith and This is a very nice post. Thanks for sharing with us. Keep it up.
    24*7 My Assignment Help anytime in UK.

    ReplyDelete
  54. My Assignment Services provides a 24-hour online assignment provider or academic assistance and consultation to the students. Be it any subject such as Nursing, Economics, Law, Engineering, or Management, we provide the most reliable help with assignment online by our highly-proficient academic writers. This is because there are a multitude of online academic help services and picking the best is always going to be a trial and error method. However, My Assignment Services is a well-established and prominent name in the best melbourne assignment help provider & high-quality instant assignment help online to students since almost a decade. You can trust our academic ghostwriters completely to get best quality write-ups including case studies, research proposals, dissertations and theses, and more. Australian Assignment Help providing experts understand that price is one of the major factors that university students consider before paying someone to do it for them. This is because university students often have stringent budgets and are already burdened with student debts. This is why we offer regular and seasonal discounts on marketing assignment help or other assignments so that you achieve high distinction without burning a hole in your pocket.

    ReplyDelete
  55. Being a Professional assignment writing help provider it is necessary for us to provide security to our clients.

    ReplyDelete
  56. This is a very Valuable Post ! Thanks for the information! best good morning image for friends.

    ReplyDelete
  57. Thank you for this information. I read your blog and I am satisfied with your writing contents. Reading is one of my hobbies. I like to blogs to get such intersting posts. It has a lot of tiny informaion which is really helpful to understand esily. Keep sharing more news. best good morning image for friends.

    ReplyDelete
  58. Hello
    My name is Michael Smith and This is a very awesome post. Thanks for sharing this.
    24*7 Assignment help US anytime in US.

    ReplyDelete
  59. hello,
    this is roxy smith.
    this is a nice post, thanks for sharing.
    Get the best perdisco assignment help in Australia.


    ReplyDelete
  60. I already read certain articles on same topic but your article is outstanding from others. I mean beyond from my recent read articles because you covered well required topic here likewise you should read about Free Malware Scanner tool.

    ReplyDelete
  61. I would say your resource is so interesting and informative for me and this article explained everything in detail. You have done a superb job thanks for sharing this kind of stuff with us. We have shortlisted best IOT app developers after performing a thorough research on their IoT services

    ReplyDelete
  62. Excellent and nice post. It will beneficial for everyone. Thanks for sharing such a wonderful post. Avail No 1 Dissertation Help UK from certified PhD writers. It is extremely helpful for me. You can email us at info@ukdissertationhelp.co.uk or Phone Number - 020 8144 9988.
    Visit here:- Dissertation Help

    ReplyDelete
  63. You should study in a way that you do not compromise with your health. Good health is a prerequisite for you to be able to study efficiently and to maintain motivation to do so. Sometimes, assignments also act as a hindrance in following your timetable. In such situations, you can take Java Assignment Help.

    ReplyDelete