I have an admin site set up with Forms Authentication:
<authentication mode="Forms">
<forms loginUrl="LoginPage.aspx" timeout="30" requireSSL="false" protection="Validation" slidingExpiration="true" defaultUrl="Default.aspx" enableCrossAppRedirects="true" path="/"/>
</authentication>
<authorization>
<allow roles="Admin"/>
<deny roles="Publish,Editor"/>
<deny roles="Member"/>
<deny roles="AnonymousUser"/>
</authorization>
The admin site displays user data, so the whole site has restricted access. A control on the default page displays user activity in the last 24 hours. The code calls into the Business Layer to get the user data:
[Pr ...
Go to the complete details ...