ASP.NET V2 Membership and Roles implementation in VB2005 with forms authentication
Membership Class
A custom membership class that Inherits MembershipProvider is to be provided.
Based on an MS SQL database using the System.Data.SqlClient.
To get an idea of what is involved visit:
[login to view URL]
Roles Class
Roles are extended.
The site can represent different companies so the roles are extended by companies.
User
Some customization and extension in customizing the IPrincipal in Context.User.
In addition to IsInRole and Identity a couple of additional properties have to be implemented.
Build a small website to validate the features
The objective of the site is just to validate the implementation of the security and access features. It is supposed to have about 10 pages (just for demonstration) in about 5 directories.
Part of the site is accessible with persistent cookie once identification is done, a more secure part needs authentication each time accessed (possibly secured with a non persistent cookie).
A simple user and company management part has to be written (creating / modifying, deleting companies and users based on the user and company rights).
The website should demonstrate the use of [login to view URL] and [login to view URL] in the context of the security implementation.
Part of the site (including Login and user / company management) has to be done with SSL.
Log activities
An activity Log and tracing should be part of the implementation
Best practices
Best practices are expected in terms of security, implementation and amount of server load.
Supplied
SQL Database structure and create commands
(Except for the log structure)
Test Web structure.
Requirements
Some experiences with VB2005 and ASP.NET V2
Experiences in Roles and membership management.
Basic SQL knowledge
SSL
Special Note
The ASP.NET 2 security model differs in a couple ways from the ASP.NET 1.1 model. A pure ASP.NET 2 model is required.
The task is pretty simple and easy for somebody who has done something similar – but it may not be a good idea to get involved in this project for people without the necessary knowledge.