I have following requirement for my application :
Application Security will be controlled with Windows integrated security. The Active Directory (AD) Domain must be stored in the application XML configuration file.
Users will be able to View the Master File and Transaction
assignments with no security.There will be one AD group for Adding / Changing / Deleting Master
File data.There will be one AD group for assigning Master File data to
Transaction data.A user could be in one, both or neither of the groups. The AD groups will be stored in the application XML configuration file.
I understood the requirement but not sure how to implement it. Specially the part 'A user could be in one, both or neither of the groups.'
Any thoughts or directions would be of great help.