I have created a web project where I am using .net membership out of the box, configured it correctly.
The authentication through membership and roles works when I publish the site to my hosting provider with the data source configured in the web.config, and visit a protected resource on the site, I get automatically redirected to my specified login page, login, and get redircted back to the original page that was requested (assuming I am currently in a role that is authorized to view that resource).
However, when I launch the exact same project from Visual Studio 2008 (F5) with no changes made at all to any configuration files, etc... pointing to the same remote data source that houses my asp_membership/role database, I am not requested to login and the protected resource (*.aspx) is provided without asking me to login.
As a test I qualified one of my Business Logic Class objects with:
[PrincipalPermissio ...
Go to the complete details ...