asp.net - How to enforce ASP .NET application access through a common gateway? -
background
at work moving desktop applications web applications. our asp .net web applications (not website) use .net framework 2.0 , run on iis 7.0.
environment overview
we want have 1 root application , several web applications satisfy specific business needs. example, root, application a, application b , application c. on root application display links applications user has access to. using windows authentication , managing table of application specific access levels (on our sql server 2008 database).
question
one of our goals enforce user access applications root application only. is, not want them bookmark http://appserver/root/applicationa , access application a visiting bookmark. rather want them go http://appserver/root , click on link application a access it.
how can achieve this? need high-level idea here.
many gives shot.
from gateway, launch applications via form post uses sort of expiring token. token cannot saved in bookmark, , if users hit app without token, redirect them gateway. token can generated gateway app validated child apps. once user has validated in child app, can store session variable allow them access other parts of app.
Comments
Post a Comment