ASP.Net 2.0 Site Subscriber and Login

This bid request is part of a larger project/application which will give all of our Department Heads a place to track their projects. Department Heads will be considered subscribers in the application. A subscription can have more than one login, but the original subscriber/Department Head is the Administrator. Other logins for a specific subscription can only have the role of Viewer or Manager. One of our customers would be given the role of viewer while an employee in the department could be given the role of manager. In a later bid, I hope to tie the role attached to the login to what functionality a user has in the system. The subscription id will be used in all stored procedures as a parameter. This way a subscriber login will only see clients, contacts, tasks, etc. that belong to his or her subscription. I need to move Logins out of [login to view URL] and into SQL Database. Currently my logins are stored in my [login to view URL] file. For this bid request I am asking for you to create the functionality that will track the subscription id throughout the session (from login to logout). Also I want a banner developed that displays the current logged in user at the top of every page. I have included a sample of how I want a page to look with the banner loaded. Please review the bid request and make any suggestions you might have about how to improve the application before you start coding. Security is my first concern and I want to make sure the site is built around a robust security framework. It is very important for you to review what I am asking you to build here and make any suggestions about how to make it more secure before you start coding. I am interested in changing the bid request if you can suggest ways to improve the system before you start coding. If I ask for something that does not adhere to general security best practices, please make me aware of the problem. ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). Logins Stored In Database Banner for currently logged in user Code that I can add to all of my other pages that will produce the currently logged in user banner. Session Variable for use by Stored Procedures to filter out records for only this subscriber. Instructions showing me how to use this variable as a parameter in my stored procedures. Sample stored procedure using this session variable. General Review the overall bid request and make suggestions on her to improve, especially security before starting to code. Fully working application with secure login of subscribers authenticated against the SQL table tblSubscribers. Any additional SQL Tables necessary to make this work. SQL scripts to change my tables if necessary. All SQL Stored Procedures required to make this work. I do not want any dynamic SQL in the ASPX pages. ASP.Net 2.0 Pages to implement this functionality I need detailed step by step documentation with screen shots for EVERY screen documenting how to implement the database, web pages, and code. Source Code (well commented) SQL Server 2000 objects (tables, functions, views, stored procedures) ASP.Net Pages for all functionality Email/IM support during implementation Database Documentation ASP.Net Webform - User Login Screen Login Module: This module will allow users to login into the site in order to access the pages. ## Platform I have attached a PDF file named Standards and Practices that describes our platform in detail.