Thebeerhouse Website Project Learning notes (3)----Safety Management (i)

Absrtact: Safety management is an unavoidable problem of website design, and it is also a reusable part of website design. These components need to be identified by different users, checking to see if the user has access to restricted Web pages, a method called Authentication (authentication).　 Determines what the user can access, which is called authorization (authorization). These two concepts are easy to confuse, so to understand: authentication---who are you? Authorized---I already know who you are, what can you do? Authentication and authorization are part of Web site membership Rights Management, including the creation of new users, user certificate management (including password-protection mechanisms, such as password recovery for users who have forgotten passwords), and role management associated with the account. Built-in rights management provided by MS , we can quickly establish a complete set of Web site's rights management system. The last chapter mainly discusses "Who Are You", and the next chapter focuses on "I already know who you are and what you can Do"

So our next two articles focus on the authentication and authorization management of the Thebeerhouse Web site using the internal Rights management mechanism provided by MS (see the link to the initial prerequisite article).

First of all, authentication management, that is, to solve the "who you are" problem.

I. User-Created

First through the interface to the right login password under the "Create new account" into the user accounts to create a page, the following figure:

Through the above interface we can create a user Johnson, the password is also Johnson. Note: 1. Here the registration interface is not made up of a single control (label and TextBox), but rather a control with member rights management provided by ASP.net 2.0 CreateUserWizard 2. This interface is more monotonous registration information, there are many such as the country, occupation and other information in this interface to create a successful user pop-up after the next personalized information interface is set, as shown below: