How To—Use Role-based Security with Enterprise Services

This How To describes how to create a simple serviced component that uses Enterprise Services (ES) roles for authorization.

Notes

ES roles are not the same as .NET roles.
ES roles can contain Windows group or Windows user accounts.
ES roles are maintained in the COM+ catalog.
ES roles can be applied at the (ES) application, interface, class or method levels.
ES roles can be partially configured declaratively by using .NET attributes in the serviced component’s assembly.
Windows group and user accounts must be added by an administrator at deployment time.
Administrators can use the Component Services administration tool, or script.
To effectively use Enterprise Services role-based security from an ASP.NET Web application, the Web application must use Windows authentication and impersonate callers prior to calling the serviced components.