User Management

the application uses the microsoft login mechanism implementation, which maped to local .mdf file (under <website>\AppData folder).

the application uses the session to store the login user in cache & restored user on session-end from context.identity when session is autenticated.

there is no role management implementation (yet...) in the application. the way to gain administartor role on the website is:
the administartor has the ability to do the following:
regular user has the ability to do the following:
quest (which didn't login into site) the ability to do the following: