Re: Implementing Security - Advice Please

From: John Saunders (john.saunders_at_surfcontrol.com)
Date: 08/27/03 

Date: Wed, 27 Aug 2003 09:24:30 -0400

"frank" <frank@frank.com> wrote in message
news:elq1cwIbDHA.2344@TK2MSFTNGP12.phx.gbl...
> I am in the process of writing a fairly large ASP.NET web application and
I
> am about to implement log-ons, permissions etc. I have never used any
> security with ASP.NET before; only classic ASP.
>
> I would like to base my user's logon information and permissions on their
> domain account. What is the best way to do this? Can web-based forms
> communicate with the domain users accounts? What about storing session
> information - how do we do this? Is there any recommended techniques for
> implementing this sort of security? Can anyone point me to any articles
> relating to this subject?

You don't say whether or not this is an Intranet application. If it is, then
you can use Windows Authentication.

A good starting point is the following article on MSDN: Authentication in
ASP.NET: .NET Security Guidance
(http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html
/authaspdotnet.asp). 

-- 
John Saunders
Internet Engineer
john.saunders@surfcontrol.com

Relevant Pages

  • Re: Implementing Security - Advice Please
    ... > am about to implement log-ons, permissions etc. ... > security with ASP.NET before; ... Can anyone point me to any articles ... you can use Windows Authentication. ...
    (microsoft.public.dotnet.security)
  • RE: What server hardening are you doing these days?
    ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
    (Focus-Microsoft)
  • Re: Windows Firewall Wont Stay On
    ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: get rid of security center?
    ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Password Protect IExplore
    ... You can protect the files and folders you store on your computer to make ... To set, view, change, or remove special permissions for files and folders ... clear the Inherit from parent the permission entries that apply ... To configure security so that the subfolders and files will not ...
    (microsoft.public.internet.explorer.ieak)