当前位置：首页 » 软件开发

开发技术指南» 文章正文

    引言： How can you take advantage of th

 

 

Implementing Security For Web Applications @ JDJ
if the users access your application through the internet, forms authentication is your natural choice for authenticating the users. among the authentication models - forms, windows, and passport - the forms authentication needs more development effort, since you need to manage the users and roles within your application. how many times have you built the user management components from scratch for your web applications? asp.net 1.x supported various authentication models and role-based security, but we still had to write code for managing users and their roles. asp.net 2.0 brings in the following tools and class libraries that simplify the task of implementing forms authentication: web site administration tool: helps you manage users, roles, and web configuration data conveniently through a browser membership and roles classes: provides a standard api for managing user accounts and roles providers for membership, roles, and other site management tasks: encapsulates the business logics and binds the site management data with various data sources security controls: drag and drop controls for creating login forms the arrival of these new tools and class libraries means you can now avoid reinventing the wheel. figure 1 shows the general approach you can follow to implement forms authentication with asp.net 2.0.

flexibility is the key ingredient of these new tools and class libraries. they not only save you hundreds of lines of code, but also give you the complete control over how you can use them within your application.

the provider design pattern allows you to create your own membership and role providers by extending the existing ones for implementing your application-specific business and data access logics. the security controls support templates, allowing you to modify them according to the needs of your application. a quick way to understand the power of the asp.net 2.0 security framework is to try the web site administration tool.

web site administration tool 【推荐阅读:优秀的O-R Mapping工】

how can you take advantage of the new security features of asp.net 2.0, and how can you extend them for the specific needs of your web applications?

new security features

with the web site administration tool (wat) in asp.net 2.0, you can now manage your application configuration settings conveniently through a browser (see figure 2).

the wat is not just a configuration setting tool. by using wat, you can carry out a wide range of web site administration tasks that include: setting up the data providers setting up the authentication creating and managing user accounts and user profiles creating roles and assigning them to users managing application counters configuring smtp settings you can manage your application settings locally
...   下一页

» 本期热门文章：

· 热门栏目：

» 相关精选文章

» 其它相关：