Hi,
I'm developing a web app that is to be used on the firms intranet. As it is on the intranet it is using windows authentication to authenticate all users. Once the user has been authenticated the username is then taken using string name = User.Identity.Name. This is then checked against a database containing the usernames of people who are allowed to access the web app.
If the user is in the database they are shown the index.aspx page otherwise they are redirected to a noAccess.aspx. But if the person who has been redirect to the noAccess.aspx page enters the address of a webpage that only users in the database are ment to see they also can access it.
Can anyone suggest anything that I could implement that will use windows authentication to authenticate all users, then check the user if they are in the database, if they are in the database then give them access otherwise block all access to the entire site.
...
Go to the complete details ...