|
MTS can query the role of the caller and verifies its credentials by using IsCallerInRole() function in IObjectContext interface.
|
|
The same function can be used to enforce programmatic security in case the role based security is not enough.
|
|
Some functions might want to allow a certain functionality to the some roles (such as amount of order). Instead of defining a different interface for the same functionality, developer can get the role information and changes the behaviour of the process according to the callee's role.
|
|
Before using IsCallerInRole() function, it is recommended to see whether some security restrictions are applied to the component. IsSecurityEnabled() function in IObjectContext interface returns FALSE, if the component is installed in in-process server.
|
