Assignment #7B – User and Security

Objective

Design, implement, and document the security layer for the application

Assignment

You will need to select a user management system and document the choice. There are many choices, but you will need to implement, build, and/or configure a system that meets your needs. You will document and demonstrate the user system and the different security levels for your application.

Resources

Role Based Security – Role based security is probably the most common of the security protocols. The typical role based security uses subjects, roles, and permissions (sometimes other names are used). Subjects can have multiple roles and roles almost always have multiple subjects. Roles are assigned permissions to different resources. The mapping of a subject, role, and permission is sometimes called a Session. Roles in role based security can be User, Admin, Editor and these can include many Permissions. You can read about role based security at https://en.wikipedia.org/wiki/Role-based_access_control

Microsoft ASP.NET Role Based Security – In the Microsoft world role based security is built into .NET and is called the Membership model. It is easy to implement as all classes are already built into .NET More is available at https://docs.microsoft.com/en-us/aspnet/web-forms/overview/moving-to-aspnet-20/membership

Microsoft Core Security Model – With .NET 4.5 Microsoft updated the model, the full current documentation is at https://docs.microsoft.com/en-us/dotnet/api/system.web.security.membership

A good article that covers the Microsoft authentication model step by step is here – https://code.msdn.microsoft.com/ASPNET-MVC-5-Security-And-44cbdb97

A really good video that will get you completely through this is at – http://pluralsight.com/training/Player?author=scott-allen&name=aspdotnet-mvc5-fundamentals-m3-identity&mode=live&clip=0&course=aspdotnet-mvc5-fundamentals

Node.js Role Based Security – All of the stacks typically have support for authentication or a method to use a library. Node is no exception and you can read a lot about the model at https://blog.nodeswat.com/implement-access-control-in-node-js-8567e7b484d1

Others – Each student in this class is using a different stack (the number of stacks is the same as the number of students). Please all send me links you have reseached for your respective stack and I will include it here).