Hi All,
I was just wondering what will be a good approch to Externalize Authorization from application code. Is it possible to do a application context sensitive rule based authorization via an external Authorization manager. XACML maybe
If we narrow down the domain to just web services, can WS-Policy be used to create and enforce general purpose authorization policy
Is there already something out there
Regards,
Rana
External Authorization manager
Galore Software
Take a look at http://msdn.microsoft.com/library/default.asp url=/library/en-us/dnpag2/html/wssp.asp
Arnon