Feedback

# re: My First Three Website Security Tutorials Now Live 2/9/2008 7:14 AM Suhair Gassan E

Scott, these tutorials help greatly. Your data tutorials were like informations packaged in time capsule. I learned "Real" data access through that tutorials. I am sure these ones too will be like that. All the best.

# re: My First Three Website Security Tutorials Now Live 2/11/2008 8:23 AM Bob Langdon

I second the previous comments, Scott, this is gonna be in invaluable series of tutorials for me. At least, I've found practical examples with explanations I can follow (even the basic theory stuff!), you're a star, thanks a lot for taking the time to produce these, Scott!

# re: My First Three Website Security Tutorials Now Live 2/11/2008 12:54 PM Arnold Smith

This looks very interesting

# re: My First Three Website Security Tutorials Now Live 2/12/2008 5:50 AM Salim Fayad

Hi Scott,

The three tutorials were good, especially the third one.

I would like to share with you a solution that I have implemented so that you can give me your feedback if it is good or not.

I had in my project a requirement that let's the administrator of my application creates as many roles as he wants and to specify the sections and whether this role has a ReadOnly access or FullAccess.

I used the SqlRoleProvider. What I did is the following:
1. All the functionalities were implemented in user controls
2. All my user controls were inherted from a BaseUserControl
3. I was checking on each user control if the user has access or not. If he didn't have access, then this user control will be not visible for him
4. If the user has access, I was checking if the user has ReadOnly access, then I was looping through the entire controls and setting them to readonly.

If you want to contact me through my email, it is salimfayad@hotmail.com

Thanks in advance.

# re: My First Three Website Security Tutorials Now Live 2/18/2008 12:55 PM Scott Mitchell

Salim, this approach would be fine. I would also encourage you to programmatically check the logged on user's role on postback before performing any action, just in case a user is able to circumvent the UI-related security you have in place (be it by accident or intent).

Thanks

# re: My First Three Website Security Tutorials Now Live 2/19/2008 9:05 AM Dmitry Lyalin

This is a very excellent topic to explore in detail. Forms Authentication and the various ASP.NET security systems seem simple at first but do have a lot of depth to them. Keep the tutorials coming!

# The Five Next Security Tutorials are Now Available Online 2/28/2008 2:06 PM Scott on Writing

# Five New Security Tutorials Now Available 2/28/2008 2:37 PM Community Blogs

As I blogged about earlier , I've been working on some tutorials for the www.asp.net site on the

# Five New Security Tutorials Now Available 2/28/2008 2:40 PM BusinessRx Reading List

As I blogged about earlier , I've been working on some tutorials for the www.asp.net site on the topics

# Three New Security Tutorials Now Available 3/25/2008 7:49 PM Scott on Writing

# Three New Security Tutorials Now Available 3/25/2008 7:58 PM BusinessRx Reading List

I've been working on some tutorials for the www.asp.net site on the topics of forms authentication, authorization,

# Three New Security Tutorials Now Available 3/25/2008 8:39 PM ASPInsiders

I've been working on some tutorials for the www.asp.net site on the topics of forms authentication, authorization,

# Final Three Security Tutorials Published 4/2/2008 10:55 PM Scott on Writing

# Final Three Security Tutorials Published 4/2/2008 11:04 PM BusinessRx Reading List

As noted in previous blog entries, I've been working on some tutorials for the www.asp.net site on the

# Final Three Security Tutorials Published 4/2/2008 11:12 PM Community Blogs

As noted in previous blog entries, I've been working on some tutorials for the www.asp.net site on

# Final Three Security Tutorials Published 4/24/2008 12:56 PM .Net World

As noted in previous blog entries, I've been working on some tutorials for the www.asp.net site on

# Three New Security Tutorials Now Available 4/24/2008 12:58 PM .Net World

I've been working on some tutorials for the www.asp.net site on the topics of forms authentication

# Five New Security Tutorials Now Available 4/24/2008 1:02 PM .Net World

As I blogged about earlier , I've been working on some tutorials for the www.asp.net site on the

Title:
Name:
Url:
Enter the code you see:
Comments
Remember Me?

Ads Via DevMavens