The asp.net security best practices whitepaper is a good resource--it
discusses all aspects of securing your app:
http://www.microsoft.com/downloads/release.asp?ReleaseID=44047 The threats and countermeasures paper may also be helpful:
http://msdn.microsoft.com/asp.net/default.aspx?pull=/library/en-us/dnnetsec/html/threatcounter.asp
-- Mary
MCW Technologies
http://www.mcwtech.com On Mon, 16 Feb 2004 23:48:58 GMT, "Andrew Banks"
[quoted text, click to view] <banksy@nojunkblueyonder.co.uk> wrote:
>Can anyone point me in the direction of a good tutorial/guido using security
>roles with forms authentication in C#
>
>I have an admin section to my website and would like two levels of admin.
>
>I'm currently detecting a filed in the DB and if the user doesn't have full
>access rights, I hide the links to certain sections. Far from secure as they
>could still type te URL of the page and get direct access.
>
>Thanks in advance
>