I am trying to develop web parts in VS 2008/WinXP
I created a Web Site project, and added a couple of web parts within the default form in default.aspx
Because of Windows User Account Control (UAC), when working with Windows Vista or Windows Server 2008, the local Administrators group will behave differently than other groups. The attribute won’t correctly recognize a member of the local Administrators group unless you modify your computer’s UAC settings.
Exactly what happens when you attempt to invoke a controller action without being the right permissions depends on the type of authentication enabled. By default, when using the ASP.NET Development Server, you simply get a blank page. The page is served with a 401 Not Authorized HTTP Response Status.
If, on the other hand, you are using IIS with Anonymous authentication disabled and Basic authentication enabled, then you keep getting a login dialog prompt each time you request the protected page.