Compartir a través de


Key Security Concepts 

The Microsoft .NET Framework offers code access security and role-based security to help address security concerns about mobile code and to provide support that enables components to determine what users are authorized to do. These security mechanisms use a simple, consistent model so that developers familiar with code access security can easily use role-based security, and vice versa. Both code access security and role-based security are implemented using a common infrastructure supplied by the common language runtime.

Because they use the same model and infrastructure, code access security and role-based security share several underlying concepts, which are described in this section. Make sure that you are familiar with these concepts before reading the documentation for .NET Framework code access security and role-based security.

In This Section

  • Security Policy
    Provides an overview of security policy and how it is used by the runtime.
  • Principal
    Describes three kinds of principals supported by .NET Framework role-based security.
  • Authentication
    Provides an overview of the authentication process used in .NET Framework role-based security.
  • Authorization
    Provides an overview of the authorization process used in .NET Framework role-based security.
  • Code Access Security
    Describes .NET Framework code access security in detail and provides instructions for using it in your code.
  • Role-Based Security
    Describes .NET Framework role-based security in detail and provides instructions for using it in your code.