Membership provider implementation - General development

BugNET Forums

Forum

Development

General develop...

Membership provider implementation

11/23/2009 10:18 AM

Kalle

Joined: 11/20/2009

Posts: 5

Membership provider implementation

The membership provider implementation in BugNET is not implemented in the correct manner or best practice. The whole idea behind the membership, role and profile concept is transparency and to be able to store your users and roles in whatever kind of data source and rely on the username to be unique.

BugNET have hard coded relations to the userid in aspnet_membership table and I cannot change my membership provider, when I edit the store procedure BugNet_Role_GetRolesByUser I see some very strange SQL code where there is a join between BygNET table and aspnet_membership table.

A better way is to replace the guid column with userid to a string column where you save the username instead, as I said, the username is unique.

We have a bunch of application all using the membership- and role provider concept and a user is created one in a shared database and can login with the same username/password in all applications as long as the roles allows him.

I love the functionality in BugNET and are in the startup to implement the system as our front desk, but I need to rewrite the username handling.

/Kalle

11/30/2009 8:43 AM

smoss

www.orbitsolutions.co.za
Joined: 3/14/2007

Posts: 177

Re: Membership provider implementation

Modified By smoss on 11/30/2009 8:47:43 AM

Thanks /Kalle ..... I logged it under http://support.bugnetproject.com/Bugs...

Very useful post.

You obvously know what you are doing, but just for the benefit of every one else:

Two applications can share membership providers if connections in the two web.config's are setup correctly AND you must use the same ApplicationName in the web.configs.

This is very important as it forms part of the "salt string" in ASP.NET authentication, and it controls the application's view of the users.

Follow me on twitter: @stewartmoss http://www.twitter.com/stewartmoss

Page 1 of 1

Forum

Development

General develop...

Membership provider implementation

Forum Policy

These Discussion Forums are dedicated to the discussion of the BugNET issue tracker.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:
1. No Advertising.
2. No Flaming or Trolling.
3. No Profanity, Racism, or Prejudice.
4. Site Moderators have the final word on approving/removing a thread or post or comment.
5. English language posting only, please.