We're going to use an ORM tool with a .NET desktop application. The tool allows creation of persistent classes. It generates all database tables automatically.

In addition to other data, our system needs to store user credentials, and deliver access control.

The question is, is there any possibility of access control by means of ORM, without creating the database authentication mechanisms manually? Is there any product on the market which allows this?

We thought of limiting the access in the program itself, but users can easily access the database directly, and bypass the program limitations.

Thanks.