Gridview rowupdating cancel event
This may entail showing or hiding data based on the user's role, or offering additional functionality to users that belong to a particular role.Such fine grain role-based authorization rules can be implemented either declaratively or programmatically (or through some combination of the two).
It then examines how to apply role-based URL authorization rules. When using forms authentication, an authentication ticket is used as an identity token.
Applying authorization rules on a user-by-user basis can grow into a bookkeeping nightmare.
A more maintainable approach is to use role-based authorization.
The good news is that the tools at our disposal for applying authorization rules work equally well with roles as they do for user accounts.
URL authorization rules can specify roles instead of users.The Login View control, which renders different output for authenticated and anonymous users, can be configured to display different content based on the logged in user's roles.