Quantcast
Channel: Visual C# forum
Viewing all articles
Browse latest Browse all 31927

Does Entity Framework 4.0 support role base security?

$
0
0

We have a number of applications we are attempting to convert from Oracle Forms to C# and we are using the ODT.NET and ODP.NET so we can make use of Entity Framework 4 (even though we are leaving Oracle Forms our backend is staying Oracle).

In our Forms applications we had 2 primary roles, one with select or view privliges (the default role) and the other with create and update. Whenever a user logs into the application, their role would be changed so they can do create/updates. This allows users to view the data in TOAD or other applications, but they can only make changes when they are in our forms applications. This worked great in Forms because they had one continuously opened session with the database. Now in Entity Framework there is no longer one continuous session. I believe its called "stateless" meaning we go to the database, get/update data, and close the session, however that process could be repeated hundreds of times.

Is there any sort of built in functionality to Entity Framework 4 that allows you to get the role, or set/change the role for the lifetime of the session (ie. the EntityConnection)?

I have been unable to find anything that would support roles, yet I find that hard to believe that there is no support for roles in EF, and am really hoping I am just missing something.

If there is nothing built into EF4 to change a role, can anyone suggest a work around for dealing with the role based security we have in place? Or perhaps there is a better/more secure approach to we could implement that allows a similiar security feature?

The same question is roughly posted here on stack overflow as well if interested.

stackoverflow.com/questions/20954305/change-oracle-database-roles-in-entityconnection-of-ef4

Thank you for your time and help!!


Viewing all articles
Browse latest Browse all 31927

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>