The company I'm currently working for is migrating a VB6/MSSQL application (LOB) to .NET/MSSQL and one thing I'm stuck on is a good framework for user permissions.
The desktop software (currently and will continue to) carry a login page within it that prompts the user to login on startup. Windows identities only wouldn't be feasible as there are shared Windows logins. ADFS only wouldn't be an option since some customers don't even have a domain - and others use shared logins.
Currently, the software has users thrown into a database table... username/plaintext password/security level (1-4), and a few other supporting columns. This is a little out of date and won't meet our needs anymor
24