Tag Info

New answers tagged

0

Can't you have something like a trigger in your Role table DB that makes sure the necessary SysAdmin permissions are automatically added whenever any Create, Read, Update, Write entry gets added? i.e. Your Option 1 but with automation to ensure you do not have to manually remember to add the necessary permissions. Instead of a trigger you could also have a ...


3

How about you factor out authorization to a single function that makes all security decisions. Calls would be something like isAccessAllowed(user, FOO_OPERATION, <misc data>). Then your admin check is a single conditional in the start of the isAccessAllowed function. Implementing such a system also allows you to change security backends without having ...


1

I think both the two options are a good way to go. However, I think you consider this problem the wrong side. The two drawbacks you quoted for you two problems can be easily overcome : For the first option : if you consider giving all the rights to the Systems Administrator role and are afraid about the combinations, then I'm guessing you can just sorta ...


0

What I typically do in your scenario (perhaps we'll call it option 3), is give the sysadmin role access to ONLY the parts of the system that are specific to that role. Don't check the sysadmin role anywhere else. Then, if you want any particular user to have access to the entire system, give that person all the roles necessary for complete access. The ...



Top 50 recent answers are included