Pro Business Applications with Silverlight 5

Implementing Server-Side Security Using RIA Services

The following are different types of security functions that you generally need to consider as a part of your application design; these functions should be implemented in the services that expose data and operations from the server:

• Maintain a list of users, their authentication details, and their roles within the system.
• Validate that a user is permitted to access the application (known as user authentication). The most common technique for doing this is to require the user to enter a username and password in a login screen, although integration with the user's Windows profile is another method.
• Prevent users from calling specified operations until they are authenticated.
• Prevent users from ...