---
title: "Membership, Roles, User Profile in ASP.NET"
description: "Membership is a self-standing feature in ASP.NET for authentication; it can be integrated with ASP.NET role management to provide authorization servic"
author: "Anonymous User"
published: 2013-07-20
updated: 2020-05-28
canonical: https://www.mindstick.com/articles/1366/membership-roles-user-profile-in-asp-dot-net
category: "asp.net"
tags: ["asp.net"]
reading_time: 37 minutes
---
# Membership, Roles, User Profile in ASP.NET
Membership is a self-standing feature in ASP.NET for authentication; it can be integrated with ASP.NET role management to provide authorization services for your site. Membership can also be integrated with user profile properties to provide application-specific customization that can be tailored to individual users.\
In this article I will tell you how to use these properties. To use these properties follow these steps:-
##### Configure database
Create a new database.
Run aspnet_regsql.exe
(You can find aspnet_regsql.exe in C:\Windows\Microsoft.NET\Framework\v4.0.30319)
After running aspnet_regsql.exe a window appears like this
Click on next->choose Configure SQL Server for Application services-> click next
A confirmation screen appears with setting summery, click next to confirm
After clicking on next a screen is appears like this
Click on finish.
Now your database is configured to use these properties.
Now create a new website from File->New->Website
Select ASP.NET Empty Website
Click on ok.
Create three folders(Account,Product,User) in your project
Add Web.sitemap file to setting menu items
Code of Web.sitemap
```
```
Add a master page site.master, user interface of master page
Code of site.master
```
<%@ Master Language="C#" AutoEventWireup="true" CodeFile="Site.master.cs" Inherits="Site" %>
```
Code of site.master.cs
```
using System;
using System.Web;
public partial class Site : System.Web.UI.MasterPage
{
protected void Page_Load(object sender, EventArgs e)
{
if (HttpContext.Current.User.IsInRole("Administrator"))
{
//change header when Adminstrator login
lblHeaderText.Text = "User Registration And Product Entry";
}
else
{
//change header when User login
lblHeaderText.Text = "Product Entry";
}
}
}
```
Add a page Login.aspx in Account folder, which User Interface is like this
Code of Login.aspx
```
<%@ Page Language="C#" AutoEventWireup="true" CodeFile="Login.aspx.cs" Inherits="Login" %>
Login
```
Code of Login.cs
```
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.Security;
public partial class Login : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
}
}
```
Add four pages(Create.aspx,Edit.aspx,Index.aspx,Delete.aspx) in product folder.These pages are visible to both user and administrators.
User Interface of Create.aspx
Code of Create.aspx
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true"
CodeFile="Create.aspx.cs" Inherits="AddNewProduct" %>
```
Code of Create.cs
```
using System;
public partial class AddNewProduct : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
}
protected void btnCreate_Click(object sender, EventArgs e)
{
ProductCRUD crudClass = new ProductCRUD();
bool res = crudClass.CreateProduct(txtName.Text, txtDesc.Text);
lblMsg.Text = res ? "Record saved!" : "Unable to save record!";
txtName.Text = string.Empty;
txtDesc.Text = string.Empty;
}
}
```
User interface for Edit.aspx
Code of Edit.aspx
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true"
CodeFile="Edit.aspx.cs" Inherits="Product_Edit" %>
```
Code of Edit.cs
```
using System;
using System.Web.UI;
public partial class Product_Edit : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
if (!Page.IsPostBack)
{
try
{
ProductCRUD crudCls = new ProductCRUD();//create object of global class
Product product = null;
if (crudCls.Search(Request.QueryString["prodId"].ToString(), out product))//search product
{
//setting textboxes value
txtName.Value = product.Name;
txtDesc.Value = product.Description;
crudCls.dr.Close();
}
}
catch (Exception)
{
Response.Redirect("~/Home.aspx");
}
}
}
protected void btnSave_Click(object sender, EventArgs e)
{
try
{
ProductCRUD crudCls = new ProductCRUD();
if (crudCls.UpdateProduct(Request.QueryString["prodId"].ToString(), txtName.Value.Trim(), txtDesc.Value.Trim()))//Update Product
{
Response.Redirect("~/Product/Index.aspx?msg=Record Updated!");
}
else
{
Response.Redirect("~/Product/Index.aspx?msg=Record Not Updated!&lblColor=Red");
}
}
catch (Exception)
{
Response.Redirect("~/Product/Index.aspx?msg=Record Not Updated!&lblColor=Red");
}
}
}
```
User Interface of Index.aspx
Code of Index.aspx
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true" CodeFile="Index.aspx.cs" Inherits="Product_Index" %>
```
##### Code of Index.cs
```
using System;
using System.Drawing;
public partial class Product_Index : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
try
{
lblMsg.Text = Request.QueryString["msg"].ToString();
lblMsg.ForeColor = Color.FromName(Request.QueryString["lblColor"].ToString());
}
catch { }
}
}
```
##### User Interface of Delete.aspx
##### Code of Delete.aspx
\
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true"
CodeFile="Delete.aspx.cs" Inherits="Product_DeleteProduct" %>
```
##### Code of Delete.cs
```
using System;
public partial class Product_DeleteProduct : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
try
{
ProductCRUD crudCls = new ProductCRUD();//create global class object
Product product = null;
if (crudCls.Search(Request.QueryString["prodId"].ToString(), out product))//search product
{
ltrlProName.Text = product.Name + "?";
}
}
catch (Exception ee)
{
Response.Write(ee.Message);
}
}
protected void btnYes_Click(object sender, EventArgs e)
{
try
{
ProductCRUD crudCls = new ProductCRUD();
if (crudCls.DeleteProduct(Request.QueryString["prodId"].ToString()))
{
Response.Redirect("~/Product/Index.aspx?msg=Product Deleted!&lblColor=Green");
}
else
{
Response.Redirect("~/Product/Index.aspx?msg=Error!Product Not Deleted.&lblColor=Red");
}
}
catch (Exception ee)
{
Response.Write(ee.Message);
}
}
protected void btnNo_Click(object sender, EventArgs e)
{
Response.Redirect("~/Product/Index.aspx");
}
}
```
Make four pages(Create.aspx,Delete.aspx,Edit.aspx,ViewAll.aspx) in user folder.These pages are only visible to Administrators.
User Interface of Create.aspx
Code of Create.aspx
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true" CodeFile="Create.aspx.cs" Inherits="Account_Create" %>
```
##### Code of Create.cs
```
using System;
using System.Web.Security;
using System.Drawing;
public partial class Account_Create : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
}
protected void btnSave_Click(object sender, EventArgs e)
{
try
{
if (RBAdmin.Checked == true)
{
//create a new user
Membership.CreateUser(txtName.Text.Trim(), txtPass.Text, txtEmail.Text.Trim());
//add role for new user
Roles.AddUserToRole(txtName.Text.Trim(), "Administrator");
lblMsg.Text = "Administrator Created Sucessfully!";
txtEmail.Text = string.Empty;
txtName.Text = string.Empty;
txtPass.Text = string.Empty;
txtCnfPass.Text = string.Empty;
}
else if (RBUser.Checked == true)
{
//create a new user
Membership.CreateUser(txtName.Text.Trim(), txtPass.Text, txtEmail.Text.Trim());
//add role for new user
Roles.AddUserToRole(txtName.Text.Trim(), "User");
lblMsg.Text = "User Created Sucessfully!";
txtEmail.Text = string.Empty;
txtName.Text = string.Empty;
txtPass.Text = string.Empty;
txtCnfPass.Text = string.Empty;
}
}
catch(Exception)
{
lblMsg.ForeColor = Color.Red;
lblMsg.Text = "Error!Unable to Save Records!";
}
}
}
```
##### User interface of Delete.aspx
##### Code of Delete.aspx
\
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true" CodeFile="Delete.aspx.cs" Inherits="User_Delete" %>
```
##### Code of Delete.cs
```
using System;
using System.Web.Security;
public partial class User_Delete : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
try
{
ltrlUserName.Text = Request.QueryString["name"].ToString() + "?";
}
catch
{
Response.Redirect("~/User/ViewAll.aspx");
}
}
protected void btnYes_Click(object sender, EventArgs e)
{
try
{
//get the role of current user
string[] roles = Roles.GetRolesForUser(User.Identity.Name);
if (roles[0] == "Administrator")
{
Response.Redirect("~/User/ViewAll.aspx?msg=You Can't Delete Adminstrator!");
}
else
{
//delete user by user name
Membership.DeleteUser(Request.QueryString["name"].ToString(), true);
Response.Redirect("~/User/ViewAll.aspx?msg=Record Deleted Sucessfully!&lblColor=Green");
}
}
catch (Exception ee)
{
Response.Write(ee.Message);
}
}
protected void btnNo_Click(object sender, EventArgs e)
{
Response.Redirect("~/User/ViewAll.aspx");
}
}
```
##### User interface of Edit.aspx
##### Code of Edit.aspx
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true"
CodeFile="Edit.aspx.cs" Inherits="User_Edit" %>
```
##### Code of Edit.cs
```
using System;
using System.Web.Security;
public partial class User_Edit : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
try
{
if (!IsPostBack)
{
MembershipUser user = Membership.GetUser(Request.QueryString["name"].ToString());//get user details
//setting user details in textboxes
txtName.Text = user.UserName;
txtEmail.Value = user.Email;
}
}
catch
{
Response.Redirect("~/User/ViewAll.aspx");
}
}
protected void btnSave_Click(object sender, EventArgs e)
{
string strEmail;
strEmail = txtEmail.Value;
try
{
MembershipUser user = Membership.GetUser(Request.QueryString["name"].ToString());
user.Email = strEmail;
Membership.UpdateUser(user);//update user details
Response.Redirect("~/User/ViewAll.aspx?msg=Record updated sucessfully!");
}
catch
{
lblMsg.Text = "Error!Unable to update record!";
}
}
protected void txtEmail_TextChanged(object sender, EventArgs e)
{
btnSave.Enabled=true;
}
}
```
User Interface of ViewAll.aspx
Code of ViewAll.aspx
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true"
CodeFile="ViewAll.aspx.cs" Inherits="User_Delete" %>
```
Code of ViewAll.cs
```
using System;
using System.Drawing;
public partial class User_Delete : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
try
{
lblMsg.Text = Request.QueryString["msg"].ToString();
lblMsg.ForeColor = Color.FromName(Request.QueryString["lblColor"].ToString());
}
catch { }
}
}
```
Now make a home page, which is outside of these folders.
User Interface of Home.aspx
(Home.aspx is accessible to all users and administrators)
Code of Home.aspx
```
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true" CodeFile="Home.aspx.cs" Inherits="Home" %>