Build your professional network on facebook via our app Go to app
 
<< Prev  5 of 5 in Topic 
Topic : Security Programming in .NET
  Rate : 
Posted in Community :

.Net Champions |

.Net

 
ASP.NET 2.0 Security by Arun Sarin, Business Analyst, Oracle

ASP.NET 2.0 Security

By : Arun Sarin, Business Analyst, Oracle
Industry : IT Products Functional Area : Programming Languages
Keywords :

Security

.NET

Developers

Web Designers

ASP.NET 2.0

WEBDEVELOPMENT

Asp 2.0 Security

Activity:  5 comments  564 views  last activity : 07 06 2010 20:18:04 +0000
 Refer 10
Share
 
 
 

You are coding away on an ASP.NET page, and are trying to isolate a problem within the page.  You have some existing html/controls/markup/in-line code that is being used on the page, and you want to temporarily comment it out while you fix the problem.

What do you think is the possible solution to this problem? The simple solution is the ASP.NET 2.0 Security. Besides secirity measures it supports a little known feature called “server-side comments” that you can use to completely disable code/controls/html in a page.

Now before proceeding, there has occured one common sense question in your mind that, what the difference is between using client-side HTML comments and server-side comments.?

The reason for it being that with client-side comments it is the browser which is ignoring the content within them. Code/controls within client-side comments will still be executed on the server and sent down to the browser.  As such, if there is a server error caused within them it will block running the page.

Our basic aim here is deal with security and integrity of ASP.NET 2.0. Because of the presence of The Providr Model", security in ASP.NET 2.0 is much more simplistic, easy to configure, and quick to implement.

The model assumes the configuration of users and roles by automatically creating a database within SQL Server (or, if you choose to use Access, as an .MDB file within the Data folder of your application). Immediately, you're able to start to register and authenticate users against this newly created table.

You can also configure security by using the web adminstration tool in the following three stepped approach:

  1. Create a new Website within either Visual Studio 2005 beta or Visual Web Developer 2005 Express beta, and ensure that Website is turned into an application within IIS.
  2. Use the Web Site Administration Tool to enable and configure security for the newly created application.
  3. Use controls available in the suite of Login controls to build the UI with which our users will interact.

In addition to this there are specific login controls Login, LoginView, PasswordRecovery, LoginStatus, LoginName, CreateUserWizard, and ChangePassword controls, that allow quick, seamless integration between ASP.NET 2.0 security and your Web applications.


 

 Top Comment : Yatendra Pal Singh   | 01 12 2010 13:10:53 +0000
.net security can be implemented in DECLARATIVE or IMERATIVE way. Implementation of these depends upon various factor like role, Level, autohoraization policy. once these are finalized we can select the security technique that suits most of our requirement. Declarative security is prefered if we have to provide method, Class level security. In declarative security we define the attribute [PrincipalPermission(SecurityAction.InheritanceDemand,Role ="Admin, User")]. Declarative security can be provided through custom as well through microsoft membership and role provider. Custom way of providing the declarative requires more efforts. For imperative security we have to code with in the method for checking the permission/role using IF statements.
go to top
 
TrackBack URL:
http://www.sitepoint.com/article/asp-net-2-security
5 comments on "ASP.NET 2.0 Security"
Sort by: Most Recent Top Rated
  Commented by  Leena Pawar, Tech Architect, IT Infotech    | 01 22 2010 07:34:52 +0000 
Arun thanks for sharing this insight it was really useful. And yatendra nice explanation  keep sharing your knowledge.
  Commented by  Yatendra Pal Singh, Module lead, espire Infolabs    | 01 12 2010 13:10:53 +0000
Rating : +1  
.net security can be implemented in DECLARATIVE or IMERATIVE way. Implementation of these depends upon various factor like role, Level, autohoraization policy. once these are finalized we can select the security technique that suits most of our requirement.

Declarative security  is prefered if we have to provide method, Class level security. In declarative security we define the attribute [PrincipalPermission(SecurityAction.InheritanceDemand,Role ="Admin, User")]. Declarative security can be provided through custom as well through microsoft membership and role provider. Custom way of providing the declarative requires more efforts.

For imperative security we have to code with in the method for checking the permission/role using IF statements.
  Commented by  Rizwan Ahmed, Project Lead Quality Management Concepts Pvt. Ltd    | 09 08 2008 04:15:50 +0000 
Good one
  Commented by  Samir Nigam, Sr. Software Engineer , SRM TECHSOL Pvt. Ltd.    | 07 30 2008 05:46:38 +0000 
Nice. Thanks for this.
  Commented by  Darpan Sinha, Solution Architect, Fujitsu Consulting India Pvt Ltd    | 07 30 2008 01:56:33 +0000 
good
Add your comment on "ASP.NET 2.0 Security"

Rate:
Submit
 Found the article "ASP.NET 2.0 Security"  interesting ?  Share with your connections and communities  
Top recruitment firm for IT/ITES jobs
technical knowledge, Good Communication, customer support/technical Support, Leading Recruitment Agency, Bangalore
technical knowledge, Good Communication, customer support/technical Support, Leading Recruitment Agency, Bangalore
technical knowledge, Good Communication, customer support/technical Support, Leading Recruitment Agency, Bangalore
Viewers also viewed
in my view the aviation security,particularly airport security,should be funded from from the...
 
28 referals 4 comments, 31 views
Mallick Software Solutions provides end-to-end web design and development solutions that enhance...
 
18 referals 3 arguments, 351 views
Position Title: Senior Software Engineer (Security)   Job Description: An Engineering degree is...
 
179 referals 1 comments, 21 views
more...  
Recent Knowledge (72)
Yes they are going to be here.. and the first destination is Bangalore... Google cars and trikes...
 
1339 referals 12 comments, 443 views
CORRUPTION INSTITUTE OF INDIA (CII) (World's best C- School on the World Corruption Index...
 
423 referals 4 comments, 100 views
Fiscal deficit * Fiscal deficit seen at 5.9 percent of GDP in 2011-12 * Fiscal deficit seen at...
 
2998 referals 20 comments, 544 views
more...  
Sponsored Jobs
More From Author
They should be punished.. yes .. but who will punish them.. big question isn't it.. let us stand up and go against them.. create an Egypt in India.. Will we do that?? No we will wait for world cup and than T20 to end and then something else...
May be, but I don't think they would fit into corporate field. Corporate workplace is very different for what they have worked. So fitting into it is very difficult. 
Gone are the days when students used to sit in a class and a teacher used to take a class which consisted of nearly 50 people in it, irrespective of what students learned after each hour a new teacher would come and take a different subject....
more...