Maarten Balliauw • 12/31/2007

ASP.NET MVC framework - Security

This technical article discusses securing an ASP.NET MVC application, focusing on the limitations of using Web.config for authorization in a dynamic routing environment. It demonstrates using Code Access Security (CAS) attributes like PrincipalPermission to enforce role-based access (e.g., 'Administrator') directly on controllers and methods, and covers handling security exceptions via Global.asax or custom attributes.

0 comments

#security #authorization #Aspnet Mvc