Re: Understanding application security in .NET
From: David Thom (davidt@npsinc.com)
Date: 07/24/02
- Next message: Microsoft Newsgroups: "Re: <identity impersonate="true"> question"
- Previous message: Allen Owen: "Re: CryptoAPI cryptographic service provider (CSP) for this implementation could not be acquired"
- In reply to: Alex Jaquet: "Understanding application security in .NET"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "David Thom" <davidt@npsinc.com> Date: Wed, 24 Jul 2002 08:37:05 -0500
Huh???
I'm not sure you understood the jist of my question: I first need an
overview of "concepts and facilities"...I don't have any idea what your
example is supposed to convey.
David
"Alex Jaquet" <da-geek@caramail.com> wrote in message
news:055501c232c8$1767c5c0$9be62ecf@tkmsftngxa03...
> It's really depending if you need to store your
> users and pass into a database or into an XML document
> and then parse it.
> The two ways are good but if you have to abstract
> ressources maybe an external XML file will be better
> to treat permissions on abstract ressource.
> Into your Web.config file, you can set
> the to our forms then you will be able to secure them
>
> <autentification mode="Forms" >
> <forms name "Your form name" path ="/" loginPage
> ="WebFormLogin.aspx" protection ="All"
> </forms>
> rigth here you tell your config file to all users zo be
> autentified by your WebFormLogin.aspx
> </autentification>
> <authorization>
> <deny users="?" /> here you set you deny all
> users who are not autified
>
> then in your WebFormLogin.aspx you have to create use
> the System.Web.Security and System.XML namespace
> once a user is directly "log" by this current web form
> you can parse a XML documents who contains some users
> name and your rules. It's gonna really better to didn't
> user data base to store info due to the fact of your
> abstract ressource. Simply go and see the SAX api
> to extend your XML file.
>
> Hope this can help you.
>
> Alexandre Jaquet
> 22 years old
> Analyst Programmer looking for a job in US in
> january with .NET tech.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
- Next message: Microsoft Newsgroups: "Re: <identity impersonate="true"> question"
- Previous message: Allen Owen: "Re: CryptoAPI cryptographic service provider (CSP) for this implementation could not be acquired"
- In reply to: Alex Jaquet: "Understanding application security in .NET"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|