Main Article    Many Levels of Web Security

Component security has a couple terms you need to understand. Windows authentication refers to the authentication services that Windows 2000 performs for you. For instance, if user Ken logs in to a Web application with Basic or Integrated security, Win2K provides the security for Microsoft IIS.

  • Authentication services for components are the same as authentication services in general. Windows authentication falls in this category.
  • Authorization is the next step beyond authentication. COM+ authorization controls what users can do inside a component's code when they have instantiated their component. For instance, a user in the HRManagers role can probably perform more tasks than can a user in the HRClerks role.

End of Article


You must log on before posting a comment.

If you don't have a username & password, please register now.