a role-based security application building block
I'm thinking of developing an Application Building Block to assist ASP.NET developers who have needs for flexible role-based security models. Of main concern are systems requiring multiple types of users within a given system (Admins, System Users, or Basic System Users, for instance). I'd like to implement some degree of inheritance between the user objects, and will use the IIdentity and IPrincipal interfaces to implement the most basic functionality. Before beginning on this endeavor, however, I'm interested in your own experiences, needs, and desires. This will be a developer tool, so I guess you could say I'm open to suggestions. What would you like to see from a building block of this nature?