ASP.NET Web Site Administration Tool
Screenshot of Web Site Administration Tool main page
ASP.NET Web Site Administration Tool is a utility provided along with Microsoft Visual Studio which assists in the configuration and administration of a website created using Microsoft Visual Studio 2005 and later versions.
ASP.NET Web Site Administration Tool can be accessed by clicking ASP.NET Configuration from the Website menu[clarification needed "In which version or edition of Visual Studio?] or Project menu in Visual Studio 2010 Professional, or by clicking on the ASP.NET Configuration icon in the Solution Explorer window.
Programmatic access to the features provided by the ASP.NET Web Site administration tool is made possible by inclusion of the System.Web.Security namespace in the ASP.NET program. The classes Membership and Roles are used to store, access and modify user information in the ASPNETDB database. The user could be authenticated using the Membership.ValidateUser or FormsAuthentication.Authenticate methods. Page-based user authorization is realized by the usage of the AuthorizeRequest event of the HttpApplication class.
The ASP.NET Web Site Administration tool is a multi-tabbed utility which has the following features:
- Web Site Administration Tool Security Tab
- Web Site Administration Tool Application Tab
- Web Site Administration Tool Provider Tab
- Web Site Administration Tool Internals
The security tab is used to create users and roles, group users under different roles and assign access rules either at the role-level or user-level. When the Web site administration tool is opened to modify the existing settings, a new database is created in the App_Data folder of the application. This database stores ASP.NET membership-related information. The name of the database created is ASPNETDB by default.
The security tab simplifies and optimizes user authentication and authorization. It makes it comparatively easy to configure user permissions than code-based user-defined authentication systems which require a great amount of time, cost and manpower. However, a major drawback of this tool is that access rules could be defined only at the folder-level and not at the page-level.
The Application tab is used to specify application settings, configure SMTP settings and enable or disable debugging and tracing apart from other uses. The Application tab interacts with the configuration file of the application (web.config) and not with the ASPNETDB database. Application settings are created as objects and inserted as name-value pairs in the web.config file.
The Provider tab is used to specify the database provider for the ASPNETDB database used to store ASP.NET membership and role information. The security page does not appear unless and until the database provider is specified in the Providers tab. An SQL Data provider is generally used, but Oracle Data providers are also used in case of Oracle databases. The provider allows the user the option of to store all data related to the ASP.NET Website Administration tool or different databases for each purpose.
- "ASP.NET Web Site Administration Tool". MSDN Visual Studio 2005 Development Center. Retrieved 2008-05-22.
- "What's New in ASP.NET Configuration". MSDN Visual Studio 2005 Development Center. Retrieved 2008-05-22.
- "FormsAuthentication.Authenticate Method". MSDN. Archived from the original on 8 May 2008. Retrieved 2008-05-23.
- "Web Site Administration Tool Security Tab". MSDN. Retrieved 2008-05-23.
- Selly, Dominic; Andrew Troelsen; Tom Barnaby (2005). Expert ASP.NET 2.0 Advanced Application Design: Advanced Application Design. Apress. p. 191. ISBN 159059522X.
- "Lesson 9: Securing your Web Site with Membership and Login Controls". Archived from the original on 19 May 2008. Retrieved 2008-05-23.
- Armstrong, Damon (2005). Pro ASP.NET 2.0 Website Programming. Apress. pp. 2–6. ISBN 1590595467.
- ".NET Configuration". Retrieved 2008-05-23.