ASP.NET Web Site Administration Tool

ASP.NET Web Site Administration Tool is a utility provided along with Microsoft Visual Studio which assists in the configuration and administration of a website created using Microsoft Visual Studio 2005 and later versions.[1]

History

The Web Site Administration tool was first introduced with ASP.NET 2.0 along with ASP.NET Microsoft Management Console (MMC) Snap-in.[2]

Interface

ASP.NET Web Site Administration Tool can be accessed by clicking ASP.NET Configuration from the Website menu[clarification needed "In which version or edition of Visual Studio?] or Project menu in Visual Studio 2010 Professional, or by clicking on the ASP.NET Configuration icon in the Solution Explorer window.

Programmatic access to the features provided by the ASP.NET Web Site administration tool is made possible by inclusion of the System.Web.Security namespace in the ASP.NET program. The classes Membership and Roles are used to store, access and modify user information in the ASPNETDB database. The user could be authenticated using the Membership.ValidateUser or FormsAuthentication.Authenticate[3] methods. Page-based user authorization is realized by the usage of the AuthorizeRequest event of the HttpApplication class.[4]

Features

The ASP.NET Web Site Administration tool is a multi-tabbed utility which has the following features:

Security tab

The security tab is used to create users and roles, group users under different roles and assign access rules either at the role-level or user-level.[5][6][7][8] When the Web site administration tool is opened to modify the existing settings, a new database is created in the App_Data folder of the application.[5] This database stores ASP.NET membership-related information. The name of the database created is ASPNETDB by default.[5]

The security tab simplifies and optimizes user authentication and authorization.[5] It makes it comparatively easy to configure user permissions than code-based user-defined authentication systems which require a great amount of time, cost and manpower. However, a major drawback of this tool is that access rules could be defined only at the folder-level and not at the page-level.

Application tab

The Application tab is used to specify application settings, configure SMTP settings and enable or disable debugging and tracing apart from other uses.[6] The Application tab interacts with the configuration file of the application (web.config) and not with the ASPNETDB database.[9] Application settings are created as objects and inserted as name-value pairs in the web.config file.[9]

Provider tab

The Provider tab is used to specify the database provider for the ASPNETDB database used to store ASP.NET membership and role information.[6][8] The security page does not appear unless and until the database provider is specified in the Providers tab. An SQL Data provider is generally used, but Oracle Data providers are also used in case of Oracle databases. The provider allows the user the option to store all data related to the ASP.NET Website Administration tool or different databases for each purpose.

References

  1. ^ "ASP.NET Web Site Administration Tool". MSDN Visual Studio 2005 Development Center. Retrieved 2008-05-22.
  2. ^ "What's New in ASP.NET Configuration". MSDN Visual Studio 2005 Development Center. Retrieved 2008-05-22.
  3. ^ "FormsAuthentication.Authenticate Method". MSDN. Archived from the original on 8 May 2008. Retrieved 2008-05-23.
  4. ^ "HttpApplication..::.AuthorizeRequest Event". MSDN. Retrieved 2008-05-23.
  5. ^ a b c d "Web Site Administration Tool Security Tab". MSDN. Retrieved 2008-05-23.
  6. ^ a b c Selly, Dominic; Andrew Troelsen; Tom Barnaby (2005). Expert ASP.NET 2.0 Advanced Application Design: Advanced Application Design. Apress. p. 191. ISBN 159059522X.
  7. ^ "Lesson 9: Securing your Web Site with Membership and Login Controls". Archived from the original on 19 May 2008. Retrieved 2008-05-23.
  8. ^ a b Armstrong, Damon (2005). Pro ASP.NET 2.0 Website Programming. Apress. pp. 2–6. ISBN 1590595467.
  9. ^ a b ".NET Configuration". Retrieved 2008-05-23.
Categories