ASP.NET 3.5: A Beginner's Guide - www.mustafaof.com

416ASP.NET 3.5: A Beginner’s GuideFigure 16-24 “Complete” message shows if new user is in databaseif you type in the code alone for the Login control, you will not get the ASPNETDB.MDFdatabase and the aspnetdb_log.ldf files generated in the App_Data folder. Both of thoseare required for using the Login and CreateUserWizard controls.Adding RolesAs you saw in the section on using the Web Site Administration Tool, you are able to adddifferent roles and assign each an access rule (see Figure 16-13). You can add roles and rulesusing the Web Site Administration Tool directly from the Login control icon in the editor.From the Design mode, simply open the Login control’s pop-up menu and select AdministerWebsite. That will open the Web Site Administration Tool with direct access to the databaseyou are working with for that web site. You have access to all of the users that have beengenerated with the CreateUserWizard control. This process must take place in the editor andcannot be used when the web site is up and running, even in Visual Studio 2008.WarningAs much as I respect the strength of the encryption and protection afforded byASP.NET 3.5, I would not recommend setting up any kind of financial-transfer web siteusing it. Whenever it comes to setting up an e-business site requiring financial transfers,I use (and recommend using) a security service that does financial security and nothingelse. For both the purposes of legal protection against lawsuits and for smooth financialtransactions, rely on a well-respected security firm that deals with credit card and banktransfers, not on beginning skills with ASP.NET.With an e-business site, I am very comfortable using the ASP.NET encryption forlogging in and registering users, but when it comes time to pay a bill, I use a separatepage that logs into a security firm’s financial transfer software. In this way, your clientshave multiple protections and so do you.