Discussion:
User Impersonation
(too old to reply)
MadRussian
2006-06-17 15:48:02 UTC
Permalink
I need to allow customer service to impersonate customers to place orders for
them in a ASP.NET/CommerceServer2002 system, as well as allow customers to
place orders themselves from the website. In addition to which, for obvious
reasons, I need to prevent customer service from seeing/editing account info.
Is there a way to accomplish this in CS2002? At least partially? I have seen
it done, but badly coded around CS2K.
J.F. Larente
2006-06-18 21:14:53 UTC
Permalink
You can use Authorization Manager to build a complex role based security
model. Otherwise, the code could reside on the site where some methods check
authorization.

It's a great framework:
http://msdn.microsoft.com/msdnmag/issues/03/11/AuthorizationManager/
Post by MadRussian
I need to allow customer service to impersonate customers to place orders for
them in a ASP.NET/CommerceServer2002 system, as well as allow customers to
place orders themselves from the website. In addition to which, for obvious
reasons, I need to prevent customer service from seeing/editing account info.
Is there a way to accomplish this in CS2002? At least partially? I have seen
it done, but badly coded around CS2K.
Loading...