To answer your question, yes, there are few .net components available which allows any .net applications to apply RBAC.
RBAC - Role based access control system is a method of restricting access to 'some sources or applications or some features of applications' based on the roles of users of organization. Here, restrictions can be by means of multiple permissions, those are created by administrator to restrict access, and these permissions collectively represents a role, which will be assigned to user.
And if we go slight deeper in RBAC, it basically contains 3 features. 1) Authentication - It confirms the user's identity. Usually it is done via user accounts and passwords or credentials. 2) Authorization - It defines what user can do and cannot do in an application. Ex. ‘Modifying order’ is allowed but ‘creating new order’ is not allowed. 3) Auditing of user actions on applications. - It keeps track of user's actions on applications, as well as who has granted which access to which users?
This was very basic top view picture of RBAC system.
ASP.Net Membership Component is one of the way to implement RBAC, You can also write your own system with basic functionalities.
There are some nice and helpful articles which shows brief information and implementation of RBAC.
我为这个问题编写了自己的组件。您可以连接到 Windows 目录等，但在过去，我不想通过 Windows AD 管理应用程序的用户，因此我为我的应用程序编写了自己的基于角色和权限的子系统。
要做的工作并不多，对我来说这是非常值得的，因为我投入的正是我所需要的，而不是更多。
I wrote my own component for exactly this problem. You can interface to Windows directories and such, but in the past I did not want to manage an application's users through Windows AD, so I write my own role and privilege based subsystem for my applications.
It is not much work to do, and for me it was very worth it because I put into it exactly what I needed and no more.
发布评论
评论（3）
要回答您的问题，是的，很少有可用的 .net 组件允许任何 .net 应用程序应用 RBAC。
RBAC-
基于角色的访问控制系统是一种根据组织用户的角色限制对“某些源或应用程序或应用程序的某些功能”的访问的方法。这里，限制可以通过多个权限来实现，这些权限是由管理员创建的，用于限制访问，这些权限共同代表一个角色，该角色将被分配给用户。
如果我们进一步深入了解 RBAC，它基本上包含 3 个功能。
1) 身份验证 - 确认用户的身份。通常它是通过用户帐户和密码或凭据完成的。
2) 授权 - 它定义用户在应用程序中可以做什么和不能做什么。前任。允许“修改订单”，但不允许“创建新订单”。
3) 审核用户对应用程序的操作。 - 它跟踪用户对应用程序的操作，以及谁向哪些用户授予了哪些访问权限？
这是 RBAC 系统非常基本的俯视图。
ASP.Net Membership Component是实现RBAC的方式之一，您也可以编写自己的具有基本功能的系统。
有一些不错且有用的文章，其中显示了 RBAC 的简要信息和实现。
http://www.visual-guard.com/EN/net-powerbuilder-application-security-authentication-permission-access-control-rbac-articles/dotnet-security -article-ressources/role-based-access-control.html
http://www.codeproject.com/Articles/875547/Custom-Roles-Based-Access-Control-RBAC-in-ASP-NET
我还推荐了一些准备使用组件VisualGuard（@我工作的）和MemberProtect。
To answer your question, yes, there are few .net components available which allows any .net applications to apply RBAC.
RBAC -
Role based access control system is a method of restricting access to 'some sources or applications or some features of applications' based on the roles of users of organization. Here, restrictions can be by means of multiple permissions, those are created by administrator to restrict access, and these permissions collectively represents a role, which will be assigned to user.
And if we go slight deeper in RBAC, it basically contains 3 features.
1) Authentication - It confirms the user's identity. Usually it is done via user accounts and passwords or credentials.
2) Authorization - It defines what user can do and cannot do in an application. Ex. ‘Modifying order’ is allowed but ‘creating new order’ is not allowed.
3) Auditing of user actions on applications. - It keeps track of user's actions on applications, as well as who has granted which access to which users?
This was very basic top view picture of RBAC system.
ASP.Net Membership Component is one of the way to implement RBAC, You can also write your own system with basic functionalities.
There are some nice and helpful articles which shows brief information and implementation of RBAC.
http://www.visual-guard.com/EN/net-powerbuilder-application-security-authentication-permission-access-control-rbac-articles/dotnet-security-article-ressources/role-based-access-control.html
http://www.codeproject.com/Articles/875547/Custom-Roles-Based-Access-Control-RBAC-in-ASP-NET
I also recommend few ready to use components VisualGuard (@which I work) and also MemberProtect.
我为这个问题编写了自己的组件。您可以连接到 Windows 目录等，但在过去，我不想通过 Windows AD 管理应用程序的用户，因此我为我的应用程序编写了自己的基于角色和权限的子系统。
要做的工作并不多，对我来说这是非常值得的，因为我投入的正是我所需要的，而不是更多。
I wrote my own component for exactly this problem. You can interface to Windows directories and such, but in the past I did not want to manage an application's users through Windows AD, so I write my own role and privilege based subsystem for my applications.
It is not much work to do, and for me it was very worth it because I put into it exactly what I needed and no more.
我使用 Postsharp 编写了我的代码，只需向需要访问控制的方法添加属性即可。
I wrote mine using Postsharp, just by adding attributes to the methos which you need access control.