ASP.NET Membership Data Store and Administration Across Applications

[Ryan]

I am new to .net 2.0 and was wondering how best to leverage its
membership capabilities to handle a situation similar to the following:

We have a 4 web applications belonging to 3 departments. Each of these
is owned by a particular department. Access to the systems can be
shared across department, but access is controlled within each
department.

Ex:

WEB APPS DEPTS USING/OWNING THE APP
webMarketing Marketing and Billing (owned by Marketing)
webBilling Billing (owned by Billing)
webShipping Shipping and Billing (owned by Shipping)
webReturns Shipping and Billing (owned by Billing)

I would like to have all users help in one member data store. People
assigned to the administrator group would pretty much have free reign
to manage security access etc.

Here is where the issue comes in. I would also like for "Power
Users" from each group to be able to manage who can access their
application, BUT I don't want these power users to be able to grant
or revoke permission to OTHER applications. If a user is suspended,
any power user can unsuspend the account, but if a user is deactivated
only an Administrator should be able to reactivate them.

Do I need to make one application with subfolders representing the
individual applications in order for this to work?

eg:
CorporateWebApps
-webMarketing
-webBilling ...

Is it even possible to authorize a user to only control access to the
webApplication they own using a sharen membership data store?

Tech Info: Visual Studio 2005, SQL 2000

Thanks,
Ryan

 

[sloan]

You can implement your own MembershipProvider

google search:

custom membership provider

then you can hit any db you'd like (a common one)

http://www.15seconds.com/issue/050216.htm

 

[Ryan]

yes...but could I then allow different users the ability to grant
permission to select folders. In other words, lets say I have
MyCustomMembershipProvider. Could I say:

Jane Doe can assign people in her department rights to folder A and B
(webapps A and B) and John Doe, using the same store, can assign
rights to folders C and D (webapps C and D)?