c# - Web Forms Windows Authentication w/ Remote SQL Database -
i have asp.net 4.0 web application uses windows authentication against ad , sql server role management.
basically, want users have ad account able access application, want further secure app using roles in sql server. not want users have enter in passwords authentication.
is viable me check authentication in global application_start method, or should executing code elsewhere?
application_start
fired once when application initialized. httpcontext.current.user
contain details of user making http request caused iis initialize application.
instead use application_beginrequest
raised every incoming request, ideally should check authorization (not authentication) when web-application intends perform action, not preemptively on every request.
Comments
Post a Comment