Re: Use Roles with Forms auth ans SQL?

From: Mary Chipman (mchip@nomail.please)
Date: 02/16/03


From: Mary Chipman <mchip@nomail.please>
Date: Sun, 16 Feb 2003 14:38:05 -0500


A good resource for you would be the asp.net security best practices
whitepaper, which you can download from
http://www.microsoft.com/downloads/release.asp?ReleaseID=44047. It's
not trivial to set up database authentication in a safe manner, so I
don't think coffee alone is going to do it <g>.

-- Mary
MCW Technologies
http://www.mcwtech.com

On Sun, 16 Feb 2003 17:03:09 GMT, "|{evin" <You@dont.need> wrote:

>
> Greetings, I've been googling for about an hour now and I
>think I may be more confused than when I started. What I'd like to be
>able to do is (for simplicity's sake) the following:
>
>Have a SQL table, say 3 fields.. username, password, role
>Have 2 subdirectories.. say manage_tickets and user_maint
>
>Is it possible (and if so, some links or code snippets would be
>greatly appreciated) to be able to say that only people in the
>'technician' or 'admin' roles have access to the 'manage_tickets'
>folder and that only the 'admin' role has access to the 'user_maint'
>folder?
>
>I'd like to be able to manage user account from within the app, so
>hard-coding user names into the web.config looks to be out. I want to
>be able to create a record in SQL 'bob', 'mypassword', 'technician'
>and poof! 'bob' has access to 'manage_tickets'.
>
>Maybe I should go have some coffee....



Relevant Pages

  • Re: The User Profile Service failed the logon. User profile cannot be loaded.
    ... Now that you backed up the corrupted User Folder, ... Admin Account, and delete the corrupted User Account. ...
    (microsoft.public.windows.vista.general)
  • Use Roles with Forms auth ans SQL?
    ... insert this into web.config in your admin folder: ... >folder and that only the 'admin' role has access to ... >I'd like to be able to manage user account from within ... SQL 'bob', 'mypassword', 'technician' ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Documents & Settings Query
    ... Typing or pasting %allusersprofile% into the Start | Run box opens to the ... Documents and Settings\All Users folder on whatever drive it is located ... When logged on as Admin, you should see items from both: ... When logged on as User Account, you should see items from both: ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Server 2008 File Permissions
    ... I found out that it is the User Account ... Control under Users in Control Panel. ... the option to create a new folder - not anything else. ... I am a local admin and domain admin. ...
    (microsoft.public.windows.server.general)
  • Re: OE Quick Backup
    ... It seems to have something to do with my XP user account called "Home". ... What I may try is allocate another folder in my Home account as a limited ... Then restore/copy the original message store files into this new ... I did copy each identities' message store to C: ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)