Hi,
I've noted that through the web.config file it is possible to change the roleManager defaultProvider to 'AuthorizationStoreRoleProvider'. This enables you to authenticate against an AzMan authentication source for role based security. This is great and is definitly the direction I want to be heading in. The thing I'm not so sure about is what I can use in the <authorization> section of the web.config to control access to the URL's even before the code is run. Looking at the Microsoft information (http://msdn.microsoft.com/en-us/library/acsd09b0.aspx) it says i can only specify users, roles or verbs. Ideally I would like to supply an application name. My aim would be to allow any user that has some form of role permissions assigned to them in in the specified AzMan application access to the URL's and therefore anyone with no roles assigned would be blocked. Is this possi ...
Go to the complete details ...