July 2004 - Posts

• Why most of what I read about service-oriented architecture annoys me - Part 2

  The term, service-oriented architecture refers to somehow incorporating services into the design of an application. I say, somehow because there is currently no consensus on how services ought to be used in truly service-oriented solution. Everyone would Read More... Posted Thursday, July 29, 2004 12:28 PM by CraigMcMurtry | 4 Comments

• Why most of what I read about service-oriented architecture annoys me - Part 1

  All anyone's supposed to be thinking about in IT at the moment is how to adopt a service-oriented architecture, and how to prove that they have. Of course, the problem is that no-one can agree on what exactly a service-oriented architecture is, and to Read More... Posted Thursday, July 29, 2004 11:42 AM by CraigMcMurtry | 3 Comments

• Application Security Series, Conclusion

  Let me summarize what I have proposed through this lengthy series of posts. We have discussed application security, which covers authentication and authorization. Concerning authentication, your customers want your applications to become better corporate Read More... Posted Thursday, July 29, 2004 11:29 AM by CraigMcMurtry | 0 Comments

• Application Security, Part 31

  Now that we have considered how to use Windows Server 2003 Authorization Manager to authorize actions at the presentation tier, you may be wondering about its application to another common scenario. It is often the case that users in different roles within Read More... Posted Thursday, July 29, 2004 11:28 AM by CraigMcMurtry | 0 Comments

• Application Security, Part 30

  Note that the way we want to use the Authorization Manager API's differs somewhat from the PAG group's “Authorization and Profile Application Block.” In that block, the default use of the Authorization Manager API is to make a call to AccessCheck Read More... Posted Thursday, July 29, 2004 11:26 AM by CraigMcMurtry | 0 Comments

• Application Security, Part 29

  It's high time I finished this series . . . Okay, so obviously the idea with the Authorization Manager API is that when a button is clicked or a menu option is selected, one could have a call to AccessCheck to determine if that operation is allowed for Read More... Posted Thursday, July 29, 2004 11:21 AM by CraigMcMurtry | 1 Comments