Windows authorization

microsoft.public.dotnet.framework

12 Jul 2006 6:36 AM

AlBruAn

I need to create a way of authenticating and authorizing a user using Windows
built-in role-based security, but with a twist. I'm aware that a role can be
an organizational role, i.e. "Managers", "Admins", etc. or that a role can be
a department, ie. "Engineering", "Accounting", etc. The thing is I need a
way of specifying that a user is in the Managers group, but only for the
Engineering department and not in the Accounting department. If possible,
I'd like to use Windows built-in security so my client won't have to maintain
two lists of usernames, one for logging into the network and a separate one
for my application. Is there any way of accomplishing this using Windows
role-based security or do I need to roll my own authorization routine?
Please note: this is for a Windows Forms application and not an ASP.NET app.