<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>ADO.NET Data Services Dec2007 CTP  - Validation and Access Control</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx</link><description>Note: This post refers to the CTP available here . When building frameworks to expose and consume data on the web, access policy and data validation are always one of the first topics discussed during the design process, at conferences, etc. Given this</description><dc:language>en-US</dc:language><generator>Telligent Evolution Platform Developer Build (Build: 5.6.50428.7875)</generator><item><title>re: ADO.NET Data Services Dec2007 CTP  - Validation and Access Control</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#9188417</link><pubDate>Wed, 10 Dec 2008 03:19:08 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9188417</guid><dc:creator>Dan Crowell</dc:creator><description>&lt;p&gt;I am excited about building applications with ADO.net Data Services. It will make it easy to rapidly develop data access layers. &lt;/p&gt;
&lt;p&gt;I am researching security options. This post was written a year ago. Is the information in this still current? &lt;/p&gt;
&lt;p&gt;Thanks, Dan&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9188417" width="1" height="1"&gt;</description></item><item><title>re: ADO.NET Data Services Dec2007 CTP  - Validation and Access Control</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#7400927</link><pubDate>Sun, 03 Feb 2008 02:25:11 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:7400927</guid><dc:creator>Corey</dc:creator><description>&lt;p&gt;This technology looks very promising. I agree with Stephen's statement on the verbosity of hooking up authentication. Also, given that unit of work pattern is used and changesets are sent for save operations. What happens if my validation rules span more than one entity for the validation to be satisfied? Would I be forced to move this validation into stored procedures and triggers? &lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=7400927" width="1" height="1"&gt;</description></item><item><title>ADO.NET Data Services Training Series</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#6819478</link><pubDate>Thu, 20 Dec 2007 21:10:33 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:6819478</guid><dc:creator>Mike Taulty's Blog</dc:creator><description>&lt;p&gt;Today I found Jonathan Carter's growing series of posts over here on ADO.NET Data Services; ADO.NET...&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=6819478" width="1" height="1"&gt;</description></item><item><title>re: ADO.NET Data Services Dec2007 CTP  - Validation and Access Control</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#6737592</link><pubDate>Tue, 11 Dec 2007 22:05:50 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:6737592</guid><dc:creator>Stephen</dc:creator><description>&lt;p&gt;Mike,&lt;/p&gt;
&lt;p&gt;This seems like an awful lot of work to handle access control and validation. Have you thought about doing this declaratively instead of programmatically? Allow us to create a simple XML file that lists the users and roles that have access to a service. Also, allow us to declare validation elements to handle validating inputs. My worry about the current approach is that it appears to be highly error prone (I wire up the interceptor wrong, and I have a huge security hole). I want to create a file that looks something like this:&lt;/p&gt;
&lt;p&gt;&amp;lt;services&amp;gt;&lt;/p&gt;
&lt;p&gt; &amp;nbsp;&amp;lt;service uri=&amp;quot;orders&amp;quot; allowWriteRoles=&amp;quot;Administrators&amp;quot;&amp;gt;&lt;/p&gt;
&lt;p&gt; &amp;nbsp;&amp;lt;/service&amp;gt;&lt;/p&gt;
&lt;p&gt;&amp;lt;/services&amp;gt;&lt;/p&gt;
&lt;p&gt;An additional benefit of this approach is that you could supply a tool that allows us to build up our data services.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=6737592" width="1" height="1"&gt;</description></item><item><title>Astoria Dec 2007 CTP is Released!</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#6732899</link><pubDate>Tue, 11 Dec 2007 11:48:22 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:6732899</guid><dc:creator>Noticias externas</dc:creator><description>&lt;p&gt;My blog has been slow over the last few months, but this time its not because I haven&amp;amp;#39;t been blogging&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=6732899" width="1" height="1"&gt;</description></item><item><title>Astoria Dec 2007 CTP is Released!</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#6732614</link><pubDate>Tue, 11 Dec 2007 11:17:40 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:6732614</guid><dc:creator>Mike Flasko's Blog</dc:creator><description>&lt;p&gt;My blog has been slow over the last few months, but this time its not because I haven't been blogging&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=6732614" width="1" height="1"&gt;</description></item><item><title>re: ADO.NET Data Services Dec2007 CTP  - Validation and Access Control</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#6730957</link><pubDate>Tue, 11 Dec 2007 07:54:02 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:6730957</guid><dc:creator>MichaelD!</dc:creator><description>&lt;p&gt;You guys really need to put this in a ConfigurationSection if you haven't already. :) :) :) &amp;nbsp;This is an amazing technology... can't wait to dig into it!&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=6730957" width="1" height="1"&gt;</description></item><item><title>MSDN Blog Postings  &amp;raquo; ADO.NET Data Services Dec2007 CTP  - Validation and Access Control</title><link>http://blogs.msdn.com/b/astoriateam/archive/2007/12/10/ado-net-data-services-dec2007-ctp-validation-and-access-control.aspx#6730576</link><pubDate>Tue, 11 Dec 2007 06:57:39 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:6730576</guid><dc:creator>MSDN Blog Postings  » ADO.NET Data Services Dec2007 CTP  - Validation and Access Control</dc:creator><description>&lt;p&gt;PingBack from &lt;a rel="nofollow" target="_new" href="http://msdnrss.thecoderblogs.com/2007/12/10/adonet-data-services-dec2007-ctp-validation-and-access-control/"&gt;http://msdnrss.thecoderblogs.com/2007/12/10/adonet-data-services-dec2007-ctp-validation-and-access-control/&lt;/a&gt;&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=6730576" width="1" height="1"&gt;</description></item></channel></rss>