I considered putting this in the AJAX forum but I think it belongs better here. Moderators, feel free to move it.
When I first used the memberships/roles security feature of ASP.NET, I was pretty impressed. You basically just put a login control on your front page, and ASP.NET pretty much handles the rest! No one can get to any of your pages without first going the the login page 'front door'.
But now that I'm using AJAX features, I just realized I'm not sure if AJAX calls are protected by the same security. I had a hard time coming up with a good way to test it, so I'll just ask: Are AJAX calls protected by the same ASP.NET security as are regular page calls? In other words, if I have a webservice that expects an AJAX call, does ASP.NET make sure that anyone calling those services are logged in users? Or can just anyone access??
I'm using AJAX in several ways: UpdatePanel with AsyncPostBack, and also custom javascript/ScriptManager calling ...
Go to the complete details ...