Security Basics and ASP.NET Support

This is the first tutorial in a series of tutorials that will explore techniques for authenticating visitors through a web form, authorizing access to particular pages and functionality, and managing user accounts in an ASP.NET application.
Introduction
What is the one thing forums, eCommerce sites, online email websites, portal websites, and social network sites all have in common? They all offer user accounts. Sites that offer user accounts must provide a number of services. At a minimum, new visitors need to be able to create an account and returning visitors must be able to log in. Such web applications can make decisions based on the logged in user: some pages or actions might be restricted to only logged in users, or to a certain subset of users; other pages might show information specific to the logged in user, or might show more or less information, depending on what user is viewing the page.
This is the first tutorial in a series of tutorials that will explore techniques for authenticating visitors through a web form, authorizing access to particular pages and functionality, and managing user accounts in an ASP.NET application. Over the course of these tutorials we will examine how to:

• Identify and log users in to a website


• Use ASP.NET’s Membership framework to manage user accounts
  Create, update, and delete user accounts


• Limit access to a web page, directory, or specific functionality based on the logged in user


• Use ASP.NET’s Roles framework to associate user accounts with roles


• Manage user roles


• Limit access to a web page, directory, or specific functionality based on the logged in user’s role - Customize and extend ASP.NET’s security Web controls

Read this article