page access security

[met0555]

Hi,

I have a website with many pages and many level of user accounts, i want to give a limited access for each roles... So i was thinking of doing it this way, but I'm not sure if it's secure or if there are better ways to do it.
I will create a DB with two columns, user level (admin..) and page file name (test.aspx), and each time a page is opened it checks the db against the logged in user and the current page url.
What do u think about this?


thx

[gep13]

Hello,

That approach will certainly work, but it does feel a lot like re-inventing the wheel.

There are a number of systems already in place, i.e. Forms Authentication, Membership and Roles Providers, etc, that can do all of this work for you.

Before you go ahead and role your own, make sure you have exhausted what is already created for you. As an example, take a look at the Restricted Menu sample that is in my signature.

Gary