• (cs) in reply to Admiral Nelson
    Admiral Nelson:
    I don't see the problem. It's very convenient for me.
    1. You'll have to change username whenever you change privileges (bothersome)

    2. You can't have more than one role per user

    3. If you change a role name, all users must be updated (again, bothersome)

    You end up risking a lot of extra work, just because the developer was too lazy to put the role somewhere else than in the user name. It's like putting your right shoe in the closet and your left shoe in the kitchen. It's silly, doesn't make sense and only confuses others.

  • (cs) in reply to arh
    arh:
    Admiral Nelson:
    I don't see the problem. It's very convenient for me.
    1. You'll have to change username whenever you change privileges (bothersome)

    2. You can't have more than one role per user

    3. If you change a role name, all users must be updated (again, bothersome)

    You end up risking a lot of extra work, just because the developer was too lazy to put the role somewhere else than in the user name. It's like putting your right shoe in the closet and your left shoe in the kitchen. It's silly, doesn't make sense and only confuses others.

    There. Get it now?

  • sitd (unregistered)

    it is development was similar?

  • (cs)

    He managed to use one table to accomplish the same thing as two. Brillant!

  • Empanita (unregistered) in reply to Admiral Nelson

    Hi, my name is Empanita. I'm glad you find the technique convenient. It is convenient for me as well!

  • Mathias (unregistered)

    I wonder what would happen if somebody connected to the account Administrator1 with the password Password1 :-)

  • Jem (unregistered) in reply to Admiral Nelson

    it looks like it is used in a user-class with UserName being a property of that class, so it is easier (and nicer) to just add a property Role

  • jbabey (unregistered) in reply to Admiral Nelson

    what if my first name is Emperor?

  • (cs)

    If you're going to bite the Active Directory bullet anyway, why bother with even one table?

  • David (unregistered) in reply to Admiral Nelson

    I agree

  • Mr Pessimism (unregistered) in reply to Admiral Nelson

    It will work fine for you if your user name is AdmiralNelson

    It won't work so well for GeorgeClooney unless we have a role beginning with 'Geo'

Leave a comment on “Role-based Canary”

Log In or post as a guest

Replying to comment #:

« Return to Article