Best approach to user roles with an intranet application
I'm developing an ASP.NET MVC intranet website which needs to have a few different user roles (admin, editor, writer, etc.) and the backend uses SQL Server. I read this post by scottgu about role-based security and used that as a starting point. The steps I followed were: Configured a DB using the asp_regsql.exe application Set the authentication mode to windows <authentication mode = "Window" /> Added a connection string entry to the Web.config, <connectionStrings> <add name="SqlRoleManagerConnection" connectionString="Data Source=localhost; Initial Catalog=aspservicedb; Integrated Security