By impersonating, you can use database permissions to deny non-managers the ability to query for salary data.
通过模拟,您可以使用数据库权限拒绝非管理人员查询工资数据的能力。
2
Or you can forget about impersonation and restrict access to salary data by setting the ACL for Salaries. aspx so that non-managers lack read permission.
There are, though, some cases were anonymous avatars make sense for business use, e.g. training sessions where both managers and non-managers are involved, anonymous surveys and feedback sessions.