Currently I have an ASP.NET forms application that generates pdf files for users (anonymous web users).
These pdf's are stored on the server and an email delivers the pdf to the user.
This system has been happily humming along for almost 3 years now.
Now we want to change this workflow so that the user can "login" and "download" their own files when they need to.
So I know I will need to add a User Register but I dont how I can setup permissions so that users can only download their own files.
It is crucially important that users cannot see each others files.
I can create some sort of security via obfuscation but would rather do this 'properly' as a breach of security would be bad... not very bad but seriously damaging to my future prospects.
Many thanks for your time.
ASP.NET VB SQL SERVER 2008