Authenticating and authorizing in asp.net

For this you need to use Role base user. You need to design table in database called userroles and assign role to user. And you also need table page to user roles that will tell your which role having asses to page. Than design method in your master page which checks your role is able to access page or not.


UserRole table
ID Role
1   Admin
2   User

User table need to have role columns

ID RoleID Name Add
1    1      ABC   ZYZ
2    1      ABC1 XYZ
3    2      CDE  AXY


page table

ID Page   
1  PAge1
2 Page 2

PAgeRole Table

PageID RoleId
1         1
1         2


Than you need to have method in your master or base page which takes current user role and check in PageRole table that user having access or not.