Consider a website like: Confused.com, which is a price comparison website that has millions of registered users who use it for price comparison purposes. These users register their details for price comparison purposes?
How do you deal with administration i.e. people who work for the company in question? For example, lets say that admin user x wants to see all the quotes that were generated in the last 24 hours.
Would you use ASP.NET Identity for authentication and Role Based authorisation was used for authorisation. This would mean:
1) All users whether they are admin or non-admin (price comparison searches) would be contained in the same ASP.NET Identity table.
2) After the user has logged in, the app will figure out if they are admin. If they are admin then additional options appear on the screen or they are redirected to an admin webpage.
Does this sound right? Alternatively a separate app for admin could be developed.
How is this usually done?