Knowledgebase
What is the interest of subdivide the application (and at which
level)?
An application contains a long list of permissions.
Managing these permissions is easier if you can split this list into
several groups of permissions.
In Visual Guard, permissions folders are located in the Repository
under the folder "Permission". This is the place where you create
permissions and store them. You can create as many subfolders as you
want to organize the permissions.
In the sample, we have created one folder p...
Does Visual Guard support ASP.Net MVC? (model view controller
pattern)
VG supports ASP.Net MVC.
We recommend to secure the controller or the Model part.
Are they any performance issues?
No significant performance issue has been observed while using Visual
Guard. Net and ASP.Net MVC.
Visual Guard
Can Visual Guard support Ajax for .Net?
yes. It can !
Does Visual guard support team developer?
Yes it does.
How does Visual Guard support dynamic components?
Visual Guard allows you to define in the permission editor an
expression that will change the property of a dynamic object at
runtime. For example, you can hide a column in a dynamic datagrid. The
expression is stored in the repository.
Dynamic Assemblies: You can secure applications loading assemblies
dynamically (like applications using the Microsoft CAB framework). You
can indicate the list of the assemblies in the property 'Other
Assemblies' of th...
Does VG support the code produced by Iron Speed?
As Iron Speed produces .Net code, ce code is supported by VG (any
standard .Net components are supported).
Visual Guard
We are using controls from Developer Express
(http://www.devexpress.com/ [1]). The ReadOnly property is kept inside
a property called Properties. For example, to set the ReadOnly on a
TextEdit control to true, the following code would be used:
TextEdit1.Properties.ReadOnly = True. Is there any way to set the
ReadOnly on a control using the Visual Guard Console. When I brought
up these controls with the Console, the ReadOnly was not shown.
The 'Properties' property is considred as a component by Visual...
Is this product compatible with Microsoft Office SharePoint 2007? We
intend on making most of our web applications available through
SharePoint.
Yes, Visual Guard is compatible with Microsoft Office SharePoint
2007.
For instance, you can develop a standard Webform application with
Visual Studio.
This application will embedd VG run-time for authentication and
permission purposes.
Then you can make it available through SharePoint.
The next question is : which system will manage user authentication?
...
How does Visual Guard to restrict access to a web service?
VG can modify properties for Visual and Non visual Components. For
instance, you may have a business object with a property called
EnableCustomerList. VG can modify this property to "false" or "true".
The web service or business object will then take this property into
account while responding to the client request.
Visual Guard
How to hide a control in a webform class (like a column of a
datagrid)?
There are 4 options:
1rst. If the object is created statically:
You can change to "false" the property "visible" of the appropriate
control, with a Visual Guard "Property Action", created with Visual
Guard Console (no coding necessary). (dynamic permission)
2nd. This option consists in coding in a Visual Guard "Script action"
(dynamic permission)
This action will execute this script on the appropriate event (for
instance "RowCr...
When a filter is defined on a list, is the query modified or do you
retrieve all rows and then hide some of them on the client? In other
words, are all the rows transferred on the network?
Both options are available with Visual Guard: In Visual Guard sample
application, a filter is defined by modifying the property "Filter"
(which filters rows already retrieved on the client). But it is also
possible to modify the property containing the SQL query to add or
modify a Where clause.
Visual Guard .NET
Do I have to write code to create a permission that will filter data?
How complex can a data filter be?
It is really easy. You use a technical action that modifies a
Property (called "property action"). You can replace the value of the
filter or add a condition to this filter. (for .net applications with
dynamic permissions)
If you use static permissions, filters have to be coded in your
program. In this case, your program will ask Visual Guard if the user
has the appropriate permission. Visual Guard...
How can I filter data when the request is coded in a stored
procedure?
Two options:
* You can retrieve all rows from the stored procedure and filter them
on the client.
* You can get from Visual Guard the value of the filter you want to
apply and use this value as an argument in the stored procedure.
Visual Guard
Is it possible to parametrize permissions?
It is possible to add parameters to a permission. In the .NET sample,
there is a permission " display only information on a country" with a
parameter "country" which specifies the country you want to display.
When this permission is linked to a permission set, you have to
indicate the country (for example for the permission set UK HR
employee the parameter is UK). This value may also be indicated by the
program in run time.
Visual guard
Can your application control row level data access? Example: A
combobox contains a list of departments. Is there any way to control
the contents of this list with permissions, so that different users
get different lists. If this requires coding in the application to
handle the logic, how do we access the permissions data in the
program.
There are several options:
1. It is possible to filter data of a dataview or change the "where"
clause of an SQL Query by adding a security action that will change
th...
Can we act on menus, buttons (button, check boxes, radio buttons and
so on) and of course all types of data entry fields (text boxes, combo
boxes and so on)?
Yes you can!
Visual Guard
With Visual Guard, you can define dynamic permissions that will apply
to dynamic controls.
Basically, the Permission Editor allows to enter the name of a
control that is not statically present in the assemblies.
At runtime, Visual Guard will try to change the properties of this
control, as defined in the permission.
If the control is there, it will be properly secured by Visual Guard.
How data access control is accomplished?
We can change the filter of a datagrid.
Another example could be to modify a property of a WCF Service that
retrieves data from the DB and sends it to the front-end.
In this case, the property is dynamically used by the webservice to
filter the data.
This type of pattern provide a high-level of protection for sensitive
data.
Help Desk by Novalys