CODEWITHSUNDEEP
asp.net
Rakesh Devarasetti
Rakesh Devarasetti

Reputation: 1429

How to use form authentication in ASP.Net?

I have one application with Form Authentication.I have different levels of users.

When logged as Admin It has to show all the screens and when logged as Client the data need to restricted. I have logged as Client in Internet Explorer.After time out Its showing Admin's data .please tell me the way to get log in page after Timeout.

My Config File sttings are : protection="All" enableCrossAppRedirects="false" slidingExpiration="true"

Thanks, Rakesh.

Upvotes: 0

Views: 121

Answers (2)

Arun Rana
Arun Rana

Reputation: 8606

You need to implement role based authorization as per below

<location path=”Admin”>
                <authorization>
                 <allow roles=”Admin” />       
                 <deny users=”*” />
                 <deny roles=”*” /> 
                </authorization>
</location> 

<location path=”Members”>
                    <authorization>
                     <allow roles=”Members” />       
                     <deny users=”*” />
                     <deny roles=”*” /> 
                    </authorization>
    </location>

Please refer this nice article for more details

Upvotes: 0

Bibhu
Bibhu

Reputation: 4081

You can put all admin accessible pages in one folder and give folder level security to allow only user's in admin role to brose through the pages. And put all the pages to be accessible by users in client role in another folder, with accessible role to be client as well as admin.

Upvotes: 1

Related Questions