Click here to Skip to main content
15,891,951 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
Do you guys have any samples or links for this issue?
Posted

Use Authentication & Authorization Concept

ASP.NET authentication and authorization[^] Click Here
 
Share this answer
 
There is a problem here, in that if you don't use the Membership classes in some form then you have to check and enforce the access rules manually in each and every page. If you use Membership, then it is all handled for you on a folder-by-folder basis via the web.config settings. If you don't, then the configuration is ignored, and you have to do it yourself - this can lead to mistakes and security holes.

Have you considered implementing your own custom Membership provider? It's not complicated, and it does get rid of a lot of the hassles with a brew-your-own-security system.
Have a look at these:
MSDN: Implementing a Membership Provider[^]
Custom MembershipProvider and RoleProvider Implementations that use Web Services[^]
 
Share this answer
 
Comments
OriginalGriff 26-Nov-12 4:54am    
Membership classes are not particularly slow - they are almost certainly faster than any security system you might introduce!

It's not the number of expected valid users you should concern yourself with. It's the one, solitary invalid user you want to worry about...

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900