http://www.larswilhelmsen.com/2008/12/17/configurable-principalpermission-attribute/ Microsoft Connected Systems MVP Wed, 28 Jul 2010 23:39:23 +0000 hourly 1 http://wordpress.org/?v=3.0.1 http://www.larswilhelmsen.com/2008/12/17/configurable-principalpermission-attribute/comment-page-1/#comment-1105 ticktock Wed, 28 Jul 2010 23:39:23 +0000 http://larsw.wordpress.com/2008/12/17/configurable-principalpermission-attribute/#comment-1105 in your opinion - would it be improper to declare a unique "role" for every single operation you want to restrict. This way the administrator has full granular control over the individuals and groups. Thoughts? Is there a better way - I like the AzMan concept where Operations are grouped into tasks and tasks assigned to roles, but I see no reason why this is any different from what I describe above, it just changes the names of the level of indirection - thanks - appreciate the Post! in your opinion – would it be improper to declare a unique “role” for every single operation you want to restrict. This way the administrator has full granular control over the individuals and groups. Thoughts? Is there a better way – I like the AzMan concept where Operations are grouped into tasks and tasks assigned to roles, but I see no reason why this is any different from what I describe above, it just changes the names of the level of indirection – thanks – appreciate the Post!

]]>