Interview Question in Microsoft CRM


 

Interview Question :: difference between Role Based and Object Based Security Model in MSCRM

 What is the difference between Role Based and Object Based Security Model in MSCRM?

by ksk
VoteNowAnswers to "difference between Role Based and Object Based Security Model in MSCRM"
Code based security is entirely coded in the application itself. Role based security uses one of the authentication/authorization mechanisms of the application server.
 
The fundamental concept in role-based security is that of privilege, defined at design time, on a system-wide basis. Each user has a set of privileges (there are well over a hundred privileges) that are enabled for that user. However, Policies and Roles grant privileges and simplify the process.
 
The other form of security applies to individual instances of objects. There is a fundamental difference between an access right and a privilege: an access right is a right granted to a user on an object), but a privilege is a right granted to a user on a class of objects. Access rights apply only after privileges have taken effect. In other words, if a user does not have the privilege to read accounts, the user will not be able to read any account, whether or not it has been shared.
by ksk