Forms Authentication

[MattJH]

Hi,


I am using forms authentication in my web app (asp.net 1.1, VS 2003) which is great for locking down individual pages and also entire directories for specified users and roles.

I would like to take it one step further and be able to give users specific rights, such as read/write.

How would i begin to do this? What would be a good starting point?

Regards,


Matt.

[imbrod]

Maybe you could create roles for that privilege?

I tried to create roles in the XML of web.config, at the authorization/authentication node. I was dissapointed when I realized that it can't be done, unless I use the database. (Am I wrong?)
Anyway, here's the link with some info about roles in forms authentication:
http://aspnet.4guysfromrolla.com/articles/082703-1.aspx

[Wokawidget]

I would like to take it one step further and be able to give users specific rights, such as read/write.

In what sense?
To a network drive, or a DB?

WOka

[MattJH]

Hi,

It is for an SQL Server.


Regards,


Matt.

[Wokawidget]

errr...Have a login tabel with Username, Password and an admin bit field.
After they login, store the UserID in a cookie or sesssion.

Then on a page, if they arn't admin, then redirect them to another page, or hide buttons etc.

Woka