Mono Security Manager – Using CAS permissions

3 Comments

1. 2005-02-23 11:48 pm

   Anonymous

   Is there a link?
2. 2005-02-23 11:49 pm

   Anonymous

   Why, is that the first time you read about mono?
3. 2005-02-24 9:48 am

   Anonymous

   I just wanna say that I use CAS permissions in almost any project I develop, expecially Web applications. Coupled with Role-based authentication, this is very effective and, most of all, protects your software from bugs or hacking exploitation attempts.

   Once you secure your logon system (in order not to allow hackers to be able to gain other user’s credentials), you get awarded with automatic permission checking over your code so (say), if you require that a method call can only be executed by a member of specific role (“Admins”, for example) or a specific user (“Administrator”) and user doesn’t meet that criteria, he/she won’t be able to execute code, whatever way he/she exploited to get there.

   I find this very effective, though it requires a slightly higher design effort.