Edit

Assigning Roles to Components, Interfaces, or Methods

  • Article

You can explicitly assign a role to any item within a COM+ application that is visible through the Component Services administrative tool. Doing so ensures that any users that are members of the role will be permitted access to that item and any other items that it contains. For example, if you assign the role "Readers" to a component, any member of "Readers" is allowed access to that component and any interfaces and methods it exposes. "Readers" will show up as an Inherited role for any of those interfaces and methods.

A method is accessible to callers only if you assign a role to it, either by explicitly assigning the role directly to the method or by assigning a role to the method's interface or the method's component, in which case the role will be inherited by the method. If no role is assigned and if access checks are enabled, all calls to the method will fail.

Before you can assign a role, you must define it for the application. All roles defined for the application will appear in the Roles explicitly set for selected item(s) window on the Security tab for any components, methods, and interfaces within the application.

To assign roles to a component, method, or interface

  1. In the console tree of the Component Services administrative tool, locate the COM+ application for which the role has been defined. Expand the tree to view the application's components, interfaces, or methods, depending on what you are assigning the role to.

  2. Right-click the item to which you want to assign the role, and then click Properties.

  3. In the properties dialog box, click the Security tab.

  4. In the Roles explicitly set for selected item(s) box, select the roles that you want to assign to the item.

  5. Click OK.

Any roles that you have explicitly set for an item will be inherited by any lower-level items it contains and will show up in the Roles inherited by selected item(s) window for those items.

Configuring Role-Based Security

Defining Roles for an Application

Enabling Access Checks for an Application

Enabling Access Checks at the Component Level

Setting a Security Level for Access Checks