.NET Security and Cryptography

Implementing ASP.NET Authorization

Authorization is a process in which you determine whether an authenticated user is granted access to a certain page or resource. In ASP.NET there are two primary ways to authorize access to a given resource: file authorization and URL authorization. Let us discuss these two types scrupulously.

File Authorization

File authorization is carried out against the authenticated account provided by IIS. It is executed by the FileAuthorizationModule. It verifies the Access Control List (ACL)^[16] or permissions on a resource to determine whether the authenticated user has privilege to access the protected resource. The FileAuthorizationModule provides authorization services against the file system ACLs. You can configure ...