Research and Implementation of Authentication and Authorization Model Based on .NET
Tao Song · Information and Electronic Engineering · 2006
In order to improve the flexibility of system,this paper discusses an authentication and authorization model in.NET Framework of web application from the view of web application security,and describes the implementation of this model.The model uses Forms Authentication to identify users.As for authorization,the model uses URL Authorization and system roles to manage user’s access on the page level and page operation level,respectively.The model could provide authentication and authorization services expediently in an intranet.Practical application indicates that web application based on the model can control user’s access effectively,consequently it enhances the security of the system.