使用Active Directory来限制数据访问的web表单应用程序（主要是通过填充的下拉列表中） [英] Using Active Directory to restrict access to data in webforms app (mainly through populating dropdowns)
问题描述
请查看场景和解决方案，我想出了。如果它吮吸，请告诉我的。
Please review the scenario and solution I came up with. If it sucks please tell me so.
场景 需要创建提交和放大器的应用;将使用由50所学校观看事故报告。当提交表单时，员工将选择从下拉他们的学校。同样，查看事故报告时，员工将选择从下拉他们的学校。一些雇员将被分配了多个学校。因此，下拉需要填充每所学校，他们被分配到。 IT部门希望使用Active Directory来控制下拉菜单的人口。
Scenario Need to create an application for submitting & viewing accidents reports that will be used by 50 schools. When submitting a form, an employee will select their school from a dropdown. Likewise when viewing accident reports, the employee will select their school from a dropdown. Some employee's are to be assigned multiple schools. Thus the dropdown needs to be populated with each school they are assigned to. The IT department wants to control the population of the dropdowns using Active Directory.
可能的解决方法
- 在Active Directory中，创建一个组织单位，称为AccidentReportingSchools
- 在组织单位，为每所学校创建安全组。
- 添加名为SchoolName一个属性添加到安全组
- 添加名为SchoolID一个属性添加到安全组
- 在写一个活动目录查询返回的所有安全组是AccidentReportingSchools组织单位（从步骤1中创建）内的记录员工的成员。
- 当员工登录到应用程序，创建一个会话变量或cookie中存储员工的学校。填充它基于活动目录查询的结果。
- 使用该cookie /会话变量来填充下拉菜单。
替代的解决方案 告诉IT部门的Active Directory是不太适合在这种特殊的情况，一个数据库表应该用于指派员工到他们的学校。
Alternate Solution Tell the IT department that Active Directory is not well suited in this particular situation and that a database table should be used for assigning employees to their schools.
推荐答案
这听起来并不像一个坏主意。虽然我不认为你需要设置为SchoolName的属性。你可以去通过AD组的名称。我也有类似的（虽然不是几乎一样大的范围）。我创建了一个基本的Intranet页IT工单。事
It doesn't sound like a bad idea. Though I don't think you need to setup an attribute for SchoolName. You can just go by the name of the AD Group. I have something similar (though not nearly as large in scope.) I created a basic Intranet page for IT Trouble Tickets.
而对于它的价值，如果你打算通过ASP.net看MVC，而不是WebForms的事情了。
And for what it's worth, if you plan on doing this through ASP.net look at MVC rather than WebForms.
这篇关于使用Active Directory来限制数据访问的web表单应用程序（主要是通过填充的下拉列表中）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
