ASP Security

Following are the project requirements: Note: The developer must be in United States with legal work status. Project Description: Need to create water-tight security on a specific portion of a large web site. The security system should be able to authenticate each user and direct him to appropriate pages based on his security previlages and prevent all other site usage. Each user will be presented with a set of menu options based on his security level. Site Environment: HTML/ASP pages. IIS. MSSQLServer database. ## Deliverables Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. Complete copyrights to all work purchased. A reusable-security system that achieves: a) User authentication & authorization b) Security level verification & site navigation based on security previlages c) integraion of the security system into functional web pages without loosing the existing page or navigational structure d) design of new web pages (including menus, graphics, html code, asp code etc) to support the security functionality where appropriate e) All coding must be done using ASP (with MSSQlServer or Oracle as backend) and should not use any third party components. No components what so ever are allowed. All code must reside in ASP pages f) Document the security design very thoroughly ## Platform ASP for serverside processing Pure HTML for web pages with no proprietary tags IIS web server running on Windows NT/2000 machines Microsoft SQL Server backend for some data and Oracle for some other data. Code must run equally well in IE 4.0+ and Netscape 4.0+ No Flash, No plug-ins, no thirdparty components, no proprietary code libraries (ulness they are provided with full rights and source code) are allowed. JaveSript is acceptable for client side code. All graphics must be light weight, high quality and be in standard formats. ## Deadline information Prefer to complete in a week to ten days. Two weeks in the max time limit by which the code must go into production. Require the developer to be an expert, must have implemented such security systems before. NOT looking for a novice who is trying to learn security by doing this project! No time for "learn by doing"