Delphi for .NET Developer’s Guide

ASP.NET Security Methods

Two primary aspects of ASP.NET security exist that you should know about—authentication and authorization. Authentication is the process of discovering and verifying the identity and roles of a user. Through authentication, the user either has or does not have access to the resource. Authorization uses a user’s identity and roles to determine what resources and at what level the user has access to.

Note

For the purpose of this discussion, I am referring to user access to external systems. We developers tend to write applications for ourselves, and security is an often overlooked or deferred feature. When developing applications that aren’t going to run on just your box, it is paramount that security is a feature that ...