Unifying Windows and Web Security Infrastructure: Threads, Principal, Permissions, Caching, and HttpModules by Daniel Cazzulino

Description

The role-based security schema introduced with .NET is very different from that of MTS/COM+. While the latter maps to Windows accounts, the former allow us to customize and implement our own authentication mechanism. Custom permission attributes now make protecting our code a snap, and they free the developer from having to perform security checks by hand. In this article, Daniel Cazzulino implements a custom security layer, which will be common to Windows and web applications.