Forum Moderators: open
With every page/process you want to make sure the user has the proper permissions to use it.
It would be ideal to know what pages/processes the user has before requesting the page (say you wanted to generate links (and it's sublinks)to pages the person has access to).
Some pages/processes may be children of other pages/processes and some may not. An example of a parent/child relationship in this case may be a data entry page.. followed by a confirmation of data page.
You may not need to have permissions to a parent to use a child though.
The processing of this information would be done on the webserver with initial credentials checked through Active Directory (to get into the secure site) but the actual page/process permission information will be stored on a SQL server.
Hopefully I was kinda clear.. any insite on the subject would be great..
Thanks all..
Ab.