Hi,

I've been studying asp.net for some months now, based on the requirements
for a project.

I seem to have a very difficult time grasping the security concepts of
asp.net 2.0.

I'll be building an online catalog, to display products.

I also need to build a customer section where they can add, update their
personal info. Check order status. Keep wish lists and shopping lists.

So I need to authenticate the users, customers, and direct them to their
appropriate account page.

Can someone please advise me how to do this and where I can get info about
this.

I've been looking at a number of sites with asp.net membership, roles and
authentication.

Can you direct me somewhere or a book where I can see how asp.net
authentication works for the internet.

I hope I have explained myself clearly, because as I said the security
concepts of asp.net are a little difficult for me to grasp.

Thank you,

Kashaan.