The term, service-oriented architecture refers to somehow incorporating services into the design of an application. I say, somehow because there is currently no consensus on how services ought to be used in truly service-oriented solution. Everyone...

All anyone's supposed to be thinking about in IT at the moment is how to adopt a service-oriented architecture, and how to prove that they have. Of course, the problem is that no-one can agree on what exactly a service-oriented architecture is, and to...

Let me summarize what I have proposed through this lengthy series of posts. We have discussed application security, which covers authentication and authorization. Concerning authentication, your customers want your applications to become better...

Now that we have considered how to use Windows Server 2003 Authorization Manager to authorize actions at the presentation tier, you may be wondering about its application to another common scenario. It is often the case that users in different roles within...

Note that the way we want to use the Authorization Manager API's differs somewhat from the PAG group's “Authorization and Profile Application Block.” In that block, the default use of the Authorization Manager API is to make a call to AccessCheck...

It's high time I finished this series . . . Okay, so obviously the idea with the Authorization Manager API is that when a button is clicked or a menu option is selected, one could have a call to AccessCheck to determine if that operation is allowed...