I finely have a successful asp.net app that uses Membership and the various login controls. I also have managed to get the roles to work correctly with my sitemap, a menu, and securityTrimmingEnabled. What was so challenging about this was discovering what I needed to do in web config. Is there a web config article and/or tool that will give us some comprehensive help in knowing everything that can and should be configured to support effective security in our web apps. In my experience the information is available but very scattered. The good news is that when you implement Membership and the controls many things are heavily automated and happen out of sight - the bad news is that many things are automated and happen out of sight. I'd like a single document that told me how the web.config file should look when I have solid security set up and web config editing tool that was more like the intellisence experience ...
Go to the complete details ...