Re: What is the best approach?
Hello Andrew,
right
also read this:
http://www.leastprivilege.com/ASPNETAuthorizationSettings.aspx
---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com
<configuration>
<system.web>
<authorization>
<deny users="*"/>
<allow roles="Admins"/>
</authorization>
</system.web>
</configuration>
this requires me "manually" add each new registered members into a
predefined role, say "Junior", "Senior", right?
"Dominick Baier [DevelopMentor]" wrote:
Hello Andrew,
have a look at the <authorization> element in web.config.
---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com
Hello, friends,
I implemented Forms Authentication in my asp.net app, it worked
fine. However, now I have another problem:
Although a user can be authenticated, but he/she may still not be
allowed to view certain pages and folders. For exampl, a junior
member can not view pages for senior memebers, although he/she can
log into the web site. What is the best approach to do this?
Any reference papers, sample code? Thanks.
.
