rlllup0084 / xaf_security_e4908

This repository contains examples for .NET Role-based Access Control, Permission Management, and OData / Web / REST API Services for Entity Framework and XPO ORM

Role-based Access Control, Permission Management, and OData / Web / REST API Services for Entity Framework and XPO ORM

For general information, please review our landing page, Backend Web API Service, and watch the overview video.

Demos and Step-By-Step Tutorials for .NET 6 and .NET Framework

Please research the information below, because additional prerequisites may apply to certain platforms. If you cannot compile or run any of these demo apps or have questions about our tutorials or supported functionality, please submit questions in the Support Center or the Issues tab above - we will be more than happy to help you.

Microsoft Entity Framework Core

• DevExtreme + ASP.NET Core Web API/OData App
• Blazor Server App
• Blazor WebAssembly App
• .NET MAUI (iOS/Android) App
• JavaScript with Svelte + ASP.NET Core Web API/OData App + Blog Series
• ASP.NET Core MVC App
• WinForms App
• Console App

DevExpress XPO

• DevExtreme + ASP.NET Web API OData App
• WinForms App
• ASP.NET WebForms App
• ASP.NET Core MVC App
• Blazor Server App
• Xamarin Forms App
• Console App

We detailed the universal integration steps for any .NET app in this video.

Prerequisites to Run the Demos

• Visual Studio 2022 v17.0+ with the following workloads:
  • .NET desktop development | ASP.NET and web development | .NET Core cross-platform development
• Download and run the Unified Component Installer or add NuGet feed URL to Visual Studio NuGet feeds.
  • We recommend that you select all products when you run the DevExpress installer. It will register local NuGet package sources and item / project templates required for these tutorials. You can uninstall unnecessary components later.
  • For the .NET Framework examples, you need to install DevExpress products with the installer.

NOTE

As of Sep 17th 2021, our Role-based Access Control, Permission Management, and Web API (powered by Microsoft Entity Framework (EF Core) and DevExpress eXpress Persistent Objects ORM) is available FREE-of-CHARGE. To register and reserve your free license, simply visit: https://www.devexpress.com/security-api-free.

Frequently Asked Questions & Online Documentation

• FAQ: .NET App Security & Web API
• Security (Access Control & Authentication)
• Backend Web API Service

Feel free to submit additional questions in the Support Center or the Issues tab above - we will be more than happy to help you.

Target Audience & Common Usage Scenarios

• XAF developers who create non-XAF .NET apps and want to reuse existing data models and Security System settings (users, roles and permissions) stored in an XAF application database. Based on experience, XAF customers create custom Web and mobile UI clients with ASP.NET MVC, DevExtreme; backend servers with ASP.NET Web API/OData or Console, Windows Service, WCF apps for various administrative tasks (data modifications, report generation, scheduled workflows).

• Non-XAF developers who create standard line-of-business (LOB) apps with login, logout forms and security related functionality for any .NET UI technologies like WinForms, WPF, ASP.NET (WebForms, MVC 5, MVC Core, Razor Pages) and .NET server technologies like ASP.NET Web API/OData, WCF, etc.

Typical .NET App Security & Web API Service scenarios include the following:

• CRUD & Authorization (for instance, check user permissions, if Create, Read, Write, Delete operations are allowed for certain business classes and properties) via EF Core & XPO ORM
• Download PDF from report templates and filtered data in databases using service endpoints (aka Reports)
• Log history of data changes in databases using service endpoints (aka Audit Trail)
• Check state of input data with complex validtion rules using service endpoints (aka Validation)
• Download BLOB data stored in databases using service endpoints (aka File Attachments)
• Obtain localized captions for classes, members, and custom UI elements stored in databases using service endpoints (aka Localization)

See Also

.NET App Security API Benchmark for EF Core and XPO