I am going to setup a custom role provider, but I don’t have a very good idea of how it works behind the scenes.
[Questions]
- What is the difference between setting roles in a form authentication ticket and using a custom role provider? Which is better to use?
- If I create a custom role provider can I user role names in the web.config to allow / block users?
Thx!
1- Not sure that there is a “better” choice, that has to do with the requirements of the project. I created a role provider based on Windows Authentication rather than Forms Authentication for an internal project because I didn’t want to create a bunch of AD groups and I wanted Windows Auth to allow users into the site. As far as what does it do, it interacts with authenticated users to define who is allowed in what areas of the site.
2- Yes.
some additional info