help!! credentials stored in web.config vs in database

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi,

I have difficulties about authentication & authorization thing.
My project has an admin folder (which can only be accessed by administrator)
and a secret folder - (can be accessed by registered users).

Is it possible to store credentials in two different places and using only
one login page? (the administrator credentials in web.config file while the
registered users credentials are stored in the database).

So far, what I got working was either choose one of them: in web.config or
in the database.

I am confused how and where (which web.config, root or particular folder) to
put the authentication and authorization codes.

If it is not possible, I was thinking of having 2 login page. For registered
users and for admin. But, the problem is: it always direct me to login.aspx.
How can I direct them to adminLogin.aspx when someone try to access a file in
the admin folder?


Thanks so much...

.



Relevant Pages

  • Re: jquery .js file = windows authentication dialogue?
    ... I have a asp.net 1.1 application set up with forms authentication ... I thought maybe it was because I was accessing the .js file in my admin ... in my admin folder) so I tried moving it outside my admin folder: ...
    (microsoft.public.dotnet.framework.aspnet)
  • jquery .js file = windows authentication dialogue?
    ... I have a asp.net 1.1 application set up with forms authentication protecting ... I thought maybe it was because I was accessing the .js file in my admin ... my admin folder) so I tried moving it outside my admin folder: ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: web.config roles
    ... login page: ... The authorization works top to bottom your in or your out. ... Your new web.config for the admin folder. ... string encryptedTicket = FormsAuthentication.Encrypt; ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: web.config roles
    ... configuration tool security tab because you have a web.config file in your ... The authorization works top to bottom your in or your out. ... Your new web.config for the admin folder. ... Cool stuff it will pick up the location of the login page from the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Subfolders and security, please help!!
    ... >If the admin folder is protected by the web.config, ... >>set it up to use forms authentication and deny all ... >>default.aspx folder in my Admin subfolder, ... >>root website I'll want protected, ...
    (microsoft.public.dotnet.framework.aspnet.security)