<p>we're developing a web app to cover all aspects of a printing company from finances, to payroll, to job costing.  Its important to be able to control who can access what parts of these applications.  Don't want a line employee giving himself a raise, etc...</p>

<p>I've heard of the concept of ACL &amp; ACO, but haven't found a good example that we could adapt to our project.</p>

<p>Anyone know where I can find good information to work from?</p>

[{'answer_id': 12619, 'author': 'Jay Mooney', 'author_id': 733, 'author_profile': 'https://Stackoverflow.com/users/733', 'pm_score': 1, 'selected': False, 'text': '<p>I\'ve had to implement that type of security a couple of times.  Unfortunately I don\'t know of any really good articles that provide examples.  My implementations were mainly piecing together the parts through trial and error.</p>\n\n<p>However, I did come across this link on MSDN:</p>\n\n<p><a href="http://msdn.microsoft.com/en-us/library/52kd59t0(VS.71).aspx" rel="nofollow noreferrer">http://msdn.microsoft.com/en-us/library/52kd59t0(VS.71).aspx</a></p>\n\n<p>It has some of the concepts.</p>\n\n<hr>\n\n<p>After my original post, I did some more research.  I found this article:</p>\n\n<p><a href="http://www.aspfree.com/c/a/C-Sharp/Implementing-Role-Based-Security-using-CSharp/" rel="nofollow noreferrer">http://www.aspfree.com/c/a/C-Sharp/Implementing-Role-Based-Security-using-CSharp/</a></p>\n\n<p>it seems pretty promising, I didn\'t go through all the details, but it at least guides you through the high-level topics.</p>\n'}, {'answer_id': 12697, 'author': 'Magnus Lindhe', 'author_id': 966, 'author_profile': 'https://Stackoverflow.com/users/966', 'pm_score': 1, 'selected': False, 'text': '<p>If you\'re using .NET/Windows you might want to look into Windows Authorization Manager (AzMan). There are support for AzMan in Enterprise Library but there are other ways of using it as well.</p>\n\n<p><a href="http://msdn.microsoft.com/en-us/library/ms998336.aspx" rel="nofollow noreferrer">http://msdn.microsoft.com/en-us/library/ms998336.aspx</a>\n<a href="http://alt.pluralsight.com/wiki/default.aspx/Keith.GuideBook/WhatIsAuthorizationManager.html" rel="nofollow noreferrer">http://alt.pluralsight.com/wiki/default.aspx/Keith.GuideBook/WhatIsAuthorizationManager.html</a></p>\n'}, {'answer_id': 12707, 'author': 'Pascal', 'author_id': 1311, 'author_profile': 'https://Stackoverflow.com/users/1311', 'pm_score': 3, 'selected': True, 'text': '<p>A brief rundown on ACLs, where they should be used and how they should be structured and implemented for various applications and user levels can be found here:</p>\n\n<p><a href="http://c2.com/cgi/wiki?AccessControlList" rel="nofollow noreferrer">LINK</a></p>\n'}]
['https://Stackoverflow.com/questions/12612', 'https://Stackoverflow.com', 'https://Stackoverflow.com/users/1470/']