I need to write an internal webapp that allows our sales guys to only see their particular quotes.
I can write the webpage pretty well, but I'm having trouble knowing what/how to do the security.
They should not be allowed to see each other's quotes.
I think I could use Windows authentication with AD groups. Or I could use a login they have for the quotes SQL database (there is a column there stating which quote-group they are allowed to see).
Trouble is.. I don't know how to setup security like this. I read MS VB 2008 step-by-step.. and i've done a bunch of reading in this site.. but I'm really not sure where to begin. I don't even know how to create the login through asp.net (windows or sql authentication). Most of what I have read just relates to "forms" authentication.. and I don't think I want that (since i could use SQL or AD).
What's my best bet? Where should I go?
Are there any good ...
Go to the complete details ...