Well -

AzMan give you another layer of indirection - a separate GUI to setup roles
and users. Something you would otherwise have to write yourself.

But AzMan can do much more than just role based security (it is just that
the ASP.NET provider only exposes the role functionality).

Have a look at this document:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetserv/html/AzManApps.asp
and
http://msdn2.microsoft.com/en-us/library/aa480245.aspx


-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

[quoted text, click to view]

Hi,

As far as I understand there are two types of role based security available
to use with ASP.NET applications : AzMan Role Based Security and ASP.NET
Role Based Security. What kind of decision should be made about using one of
two?

Thanks in advance.