ASP.NET Membership
        Posted  
        
            by Gary McGill
        on Stack Overflow
        
        See other posts from Stack Overflow
        
            or by Gary McGill
        
        
        
        Published on 2010-03-25T23:35:55Z
        Indexed on 
            2010/03/25
            23:43 UTC
        
        
        Read the original article
        Hit count: 522
        
ASP.NET
|asp.net-membership
I'd like to use the ASP.NET membership provider in the following (low-security) scenario...
My company will create and administer user accounts on behalf of our clients. These accounts will likely be shared amongst several people in the client company (is that a problem?).
There will be 2 types of users (2 roles): client and administrator. Administrators are the people within my company that will have special privileges to create client user accounts, etc.
Clients will not be able to self-register. They also won't get to choose their own password, and they should not be able to change their password either, since that will just create confusion where several people are sharing the same account.
My internal users (admins) will set the password for each client. Here's the bit I'm struggling with: if a client phones up and asks to be reminded of their password, how can my admin users find out what the password is? Can I configure the provider to store the password in clear text (or other recoverable form), and if so can I get at the password through the .NET API?
As I said at the outset, this is a low-security application, and so I plan simply to show the password in the (internal) web page where I have a list of all users.
© Stack Overflow or respective owner