AdoSecurityProvider Class

public class AdoSecurityProvider : LdapSecurityProvider

Public Class AdoSecurityProvider
	Inherits LdapSecurityProvider

public ref class AdoSecurityProvider : public LdapSecurityProvider

type AdoSecurityProvider = 
    class
        inherit LdapSecurityProvider
    end

GSF.Security.AdoSecurityProvider = function();

Type.createClass(
	'GSF.Security.AdoSecurityProvider',
	GSF.Security.LdapSecurityProvider);

CREATE TABLE UserAccount
(
    ID UNIQUEINDENTIFIER NOT NULL DEFAULT NEWID(),
    Name VARCHAR(200) NOT NULL,
    Password VARCHAR(200) DEFAULT NULL,
    FirstName VARCHAR(200) DEFAULT NULL,
    LastName VARCHAR(200) DEFAULT NULL,
    Phone VARCHAR(200) DEFAULT NULL,
    Email VARCHAR(200) DEFAULT NULL,
    LockedOut TINYINT NOT NULL DEFAULT 0,
    UseADAuthentication TINYINT NOT NULL DEFAULT 1,
    ChangePasswordOn DATETIME DEFAULT NULL,
    CONSTRAINT PK_UserAccount PRIMARY KEY (ID ASC),
    CONSTRAINT IX_UserAccount UNIQUE KEY (Name)
);

CREATE TABLE SecurityGroup
(
    ID UNIQUEINDENTIFIER NOT NULL DEFAULT NEWID(),
    Name VARCHAR(200) NOT NULL,
    CONSTRAINT PK_SecurityGroup PRIMARY KEY (ID ASC),
    CONSTRAINT IX_SecurityGroup UNIQUE KEY (Name)
);

CREATE TABLE SecurityGroupUserAccount
(
    SecurityGroupID UNIQUEINDENTIFIER NOT NULL,
    UserAccountID UNIQUEINDENTIFIER NOT NULL
);

CREATE TABLE ApplicationRole
(
    ID UNIQUEINDENTIFIER NOT NULL DEFAULT NEWID(),
    Name VARCHAR(200) NOT NULL,
    NodeID UNIQUEINDENTIFIER NOT NULL,
    CONSTRAINT PK_ApplicationRole PRIMARY KEY (ID ASC),
    CONSTRAINT IX_ApplicationRole UNIQUE KEY (NodeID, Name)
);

CREATE TABLE ApplicationRoleUserAccount
(
    ApplicationRoleID UNIQUEINDENTIFIER NOT NULL,
    UserAccountID UNIQUEINDENTIFIER NOT NULL  
);

CREATE TABLE ApplicationRoleSecurityGroup
(
    ApplicationRoleID UNIQUEINDENTIFIER NOT NULL,
    SecurityGroupID UNIQUEINDENTIFIER NOT NULL  
);

<?xml version="1.0"?>
<configuration>
  <configSections>
    <section name="categorizedSettings" type="GSF.Configuration.CategorizedSettingsSection, GSF.Core" />
  </configSections>
  <categorizedSettings>
    <securityProvider>
      <add name="ProviderType" value="GSF.Security.AdoSecurityProvider, GSF.Security" description="The type to be used for enforcing security."
        encrypted="false" />
      <add name="UserCacheTimeout" value="5" description="Defines the timeout, in whole minutes, for a user's provider cache. Any value less than 1 will cause cache reset every minute."
        encrypted="false" />
      <add name="ConnectionString" value="Eval(systemSettings.ConnectionString)" description="Configuration database connection string"
        encrypted="false"/>
      <add name="DataProviderString" value="Eval(systemSettings.DataProviderString)" description="Configuration database ADO.NET data provider assembly type creation string"
        encrypted="false"/>    
      <add name="LdapPath" value="" description="Specifies the LDAP path used to initialize the security provider."
        encrypted="false" />
      <add name="ApplicationName" value="SEC_APP" description="Name of the application being secured."
        encrypted="false" />
      <add name="IncludedResources" value="*=*" description="Semicolon delimited list of resources to be secured along with role names."
        encrypted="false" />
      <add name="ExcludedResources" value="" description="Semicolon delimited list of resources to be excluded from being secured."
        encrypted="false" />    
      <add name="NotificationSmtpServer" value="localhost" description="SMTP server to be used for sending out email notification messages."
        encrypted="false" />
      <add name="NotificationSenderEmail" value="sender@company.com" description="Email address of the sender of email notification messages." 
        encrypted="false" />
      <add name="CacheRetryDelayInterval" value="200" description="Wait interval, in milliseconds, before retrying load of user data cache."
        encrypted="false"/>
      <add name="CacheMaximumRetryAttempts" value="10" description="Maximum retry attempts allowed for loading user data cache."
        encrypted="false"/>
      <add name="EnableOfflineCaching" value="True" description="True to enable caching of user information for authentication in offline state, otherwise False."
        encrypted="false"/>
      <add name="PasswordRequirementsRegex" value="^.*(?=.{8,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).*$" description="Regular expression used to validate new passwords for database users."
        encrypted="false" />
      <add name="PasswordRequirementsError" value="Invalid Password: Password must be at least 8 characters; must contain at least 1 number, 1 upper case letter, and 1 lower case letter" description="Error message to be displayed when new database user password fails regular expression test."
        encrypted="false" />
      <add name="DefaultRoles" value="Viewer" description="If set this is a list of Roles assigned to a user that has no defined Roles."
        encrypted="false" />
    </securityProvider>
    <activeDirectory>
      <add name="PrivilegedDomain" value="" description="Domain of privileged domain user account."
        encrypted="false" />
      <add name="PrivilegedUserName" value="" description="Username of privileged domain user account."
        encrypted="false" />
      <add name="PrivilegedPassword" value="" description="Password of privileged domain user account."
        encrypted="true" />
    </activeDirectory>
  </categorizedSettings>
</configuration>