ASP.NET Dynamic Data Unleashed

Chapter 14. Implementing Security

In This Chapter

• Table Scaffolding

• Route Constraints

• Web.Config Authorization Rules

• Metadata Security API

• Implementing Row-Level Security

• Security Annotations

Dynamic Data includes an extensible security system that enables you to secure metadata-driven web applications at several different levels. At the top level, you can control whether a particular entity, such as Customer or Product, is accessible through the pages dynamically generated from page templates. At the next level down, you can configure any given entity type to allow or deny users to perform specific actions, or in other words, access the dynamically generated List, Details, Insert, and Edit pages. At the lowest level, the framework ...