Using the Session object with IIS security
I'm an experience developer new to ASP. I am building a typical site where
user are limited to certain areas based on a password. I think the logic
works as follows... The user logs in and security information must be stored
in the Session object. When the user requests a page, the ASP sends information
to IIS to see if the user has right to access the page. Is this correct?
If not please enlighten. Any info on sites, books etc would be appreciated.
Thanks in advance.
Re: Using the Session object with IIS security
Yes you are on the right way...
U can use a database o store your users, passwords and rights or something
like that, and them make from an asp page a request to that database and
then decide..
u can go here and see for demos.
www.aspfree.com
Re: Using the Session object with IIS security
yes, request goes to IIS for security check. you can set different rights
for each folder inside ur virtual folder. and keep varios pages at different
security level.
"Andrew McLellan" <mclellan_a@NOSPAMYahoo.com> wrote:
>
>
>I'm an experience developer new to ASP. I am building a typical site where
>user are limited to certain areas based on a password. I think the logic
>works as follows... The user logs in and security information must be stored
>in the Session object. When the user requests a page, the ASP sends information
>to IIS to see if the user has right to access the page. Is this correct?
> If not please enlighten. Any info on sites, books etc would be appreciated.
>
>Thanks in advance.
>
>