As I blogged about earlier, I've been working on some tutorials for the www.asp.net site on the topics of forms authentication, authorization, membership, and roles. The first set of tutorials covered security basics and examined forms authentication in detail. The second set of tutorials are now available online and focus on the Membership framework and the SqlMembershipProvider.
- Creating the Membership Schema in SQL Server [VB | C#] - explores the Membership framework and its goals. Looks at configuring and setting up the SqlMembershipProvider, which stores user account information in a Microsoft SQL Server database.
- Creating User Accounts [VB | C#] - examines creating user accounts using the CreateUserWizard control as well as using the Membership class's CreateUser method.
- Validating User Credentials Against the Membership User Store [VB | C#] - shows how to validate a user's supplied credentials and log them on (and off) the site. Looks at using both the Login Web control and the Membership.ValidateUser method.
- User-Based Authorization [VB | C#] - examines how to restrict access to pages or functionality within a page based on the logged in user.
- Storing Additional User Information [VB | C#] - the Membership framework only stores a handful of user attributes, but oftentimes additional, application-specific user information needs to be tracked. This tutorial looks at how to accomplish this.
Like with the Working with Data tutorials, all tutorials are available in C# and VB versions, include a complete, working source code download, and are available to download as PDF. The next batch of tutorials will examine the Roles framework (and the SqlRoleProvider).
Enjoy! - http://asp.net/learn/security/