Question

I am planning to write a Role Base Access Control Mechanism. What I thought is to have a set of permissions, which can be associated with each role. Normally Membership provider comes with normal roles and its details not with Permission sets. Roles with permission can be assigned to the new users. Permission Sets to Roles will give more flexibility compared to normal roles. Can any help me to do this ?

Thanks in Advance.

Best Regards,
Rajesh

Answer 1

You could implement your own authorization attribute, where instead of just checking which roles the user belongs to, you could check the permission sets that you have associated with the role(s) (or user).

I think this article is a good starting point.