UMRA – COM Portal Security Models

If you haven’t already download the free trail version of User Management Resource Administrator here > Download

If you want to learn the basics on how to connect to UMRA with its COM object, please see my original post on “Basics of UMRA COM”.

UMRA – COM Portal Security Models

When creating any web based portal with UMRA figuring out and creating your Security or Role Based Access model is critical. Some Security Models can be as simple as 1 Accesses type allowed into the UMRA portal; however in some of our client portals, they require a far more flexible but yet granular Security Model. So in this blog post I am going to talk about the different types of UMRA based Security Models that you can create, and how to expand on those.

UMRA – COM Portal Security Models Tips

Before I start any UMRA portal I like to find what Active Directory Attribute we are going to use as our Role Based Access identifier. What do I mean by this…? When you have a multi level UMRA Security Model, you need to see what attribute in active directory will be uniform across the domain (or multiple domains), so you can make sure you give the correct UMRA Role Based Access to the user logging into the portal. Now, you don’t have to rely on Active Directory itself for this data… as you’ve seen in other blogs, UMRA has the ability to access an ODBC compliant database, such as a Human Resources System, or Student Information System… You can have UMRA grab data out of these other systems, and use information obtained to distribute the UMRA Role Based Access accordingly. So now that we know what we are going to base our UMRA Security Model on, we now need to focus on What Role Types we will have.

UMRA – COM Portal Security Models Roles

So in the previous paragraph we know what we will base our Role Types off of, now we need to figure out what Roles we will have in the data base. What are “Roles”… A Role can define a “type” of user, or group of users. You may have general users type who will be able to search for users, however there searches will be filtered on a set of OU’s or users they manage. You may also have another set of users, who will get to see different “tabs” or see different options in displayed to them. In most cases and portals we build, there are 2 different types of UMRA Role Based Access types, General Users, and Super Admin Users. So now that we know our identifier, and different Role types, we can now put all this together.

So below is an example of how you can now take the steps we previous did, and wrap your UMRA portal in your new Security Models.

Step 1 > Create a UMRA project to get your UMRA Role Based Access identifier.
Step 2 > Have your web page loop, or do a case statement on the different Roles you’ve defended.
Step 3 > Wrap the rest of your web pages, or forms in your security.