Enterprise Software Authorization / Security
Security Thoughts:
There are generally three types of authorization in enterprise applications:
- Role based security - Which actions can a user do - aka role-based access control
- Entity level security - A user can only perform an Action on certain objects/data - aka row level security
- Field level security - A user can see or edit only certain fields of an entity – (this is really fine grained and usually a bad idea)