Re: I feel it makes sense NOT to use custom membership & role provider



Writing custom provider from scratch is not a trivia, so I'd like to
show my thoughts, maybe I'm wrong somewhere?

Let's say, we have 'users' table, that contains obligatory fields not
represented in 'microsoft users table'.

Splitting such info into 2 tables (1:1) won't go, because it's
impossible (as far as i can see) to implement transaction for filling
these 2 tables ('CreateUser' method call is hidden) and all in all -
such structure looks clumsy...

Maybe theoretically it's possible to create additional corresponding
fields in custom membership provider class and initialize them in
'CreatingUser' method, then take them for inserting new record in
'CreateUser'? But such approach also looks ugly... :(

Creating own membership provider from scratch is a headache,
especially for beginners (you have to deal with multithreading,
preventing access to membership while initialize method works).

I wonder why Microsoft just hadn't created one more abstraction layer
for the structure of 'users' table? So instead of having
'CreateUser(param1, param2, ... paramN)' we could have something like
'CreateUser(UserStruct user)'....

.



Relevant Pages

  • Re: Membership custom provider - logout function
    ... The custom membership provider should work against this security server. ... the data store does not generate a sessionID - the data store says yes/no to the credentials - and afterwards the login control creates something called an "authentication ticket" - this tickets get "attached" to the current request/response using either a cookie or query string mangling. ... You can configure the behaviour, lifetime, name etc. of that ticket using the config element. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: ActiveDirectory and user page Access
    ... User and role info is coming from Active directory ... This is a read-only provider that retrieves role information for a Windows ... together with both SQL and AD membership provider. ...
    (microsoft.public.vsnet.general)
  • Re: LDAP Authentication
    ... One of the things with the membership provider framework is that you don't actually have to implement every single interface member when building your provider. ... Most of the complexity stems from managing all that stuff and figuring out the LDAP details to make that work on your given directory platform. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: validaing security using AD groups... in web.config
    ... you're using ASP.NET membership provider and want ... use AD groups for authorization in the application,correct? ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Using login alias in Membership Provider
    ... ASP.NET app, but I am just writing the provider. ... or with the Login control: ... So are you using the AD membership provider currently? ...
    (microsoft.public.dotnet.framework.aspnet.security)