Return to HomePage, ASPNET2SecurityFAQs

---

Question: How is the AuthorizationStoreRoleProvider different from Authorization Manager APIs?

Answer:

AuthorizationStoreRoleProvider only exposes a subset of Authorization Manager's (AzMan) functionality. For example, you cannot use Authorization Manager's authorization business logic, such as tasks and operations.
You can use AuthorizationStoreRoleProvider only for role membership checks. The benefit of using AuthorizationStoreRoleProvider is that it provides a consistent set of APIs for role authorization. Also at development time any role store can be used and then in production it can be deployed with an AzMan policy store without affecting the code.
If you need to use the business logic capability of AzMan you will need to use the Authorization Manager APIs directly through p/invoke.

More Information

For more information on using Authorization Manager, see “How To: Use Authorization Manager (AzMan) in ASP.NET 2.0” at http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000019.asp

---

Return to HomePage, ASPNET2SecurityFAQs