StrataFrame Forum » StrataFrame Application Framework - V1 » Role Based Security » Security strategy?

Security strategy?

Ben Hayat — Thu, 18 Jan 2007 23:06:01 GMT

Hi;

Is it recommended to implement security as each form is being developed or is it better to finish the project and then apply security to the whole project?

Thanks!

RE: Security strategy?

Ben Hayat — Thu, 18 Jan 2007 23:06:01 GMT

Thanks Steve for prompt responce!

Since SF is still going through rapid development, and if I wait till towards the end of my project, security system may even get more features that can be applied at the end.

But you did answer my real question, and that is, developer has the flexibility.
Thanks!

RE: Security strategy?

Steve L. Taylor — Thu, 18 Jan 2007 21:31:01 GMT

Typically we wait until the end of project and then implement security. As with most development cycles many things change up to the final release. If your development model is very organized without much feature creep then it would be easy to implement during the actual development process.

Additionally, it depends on the level of granularity you want to use. For example, if you want to implement security at the CRUD level then it would make sense to create permission when you are creating your BO. It would also make sense to create permissions during development if you have more sophisticated forms with various levels of security at the field level.

At the end of the day it is a matter of organization and your style of coding. Localization is a very similar challenge.