FormsAuthentica tion - Roles

[Peter Morris [Air Software Ltd]]

Hi

I validate the username/password and then execute the following code

System.Web.Secu rity.FormsAuthe ntication.Redir ectFromLoginPag e(
authorId, RememberCheckBo x.Checked
);

One folder I want to restrict to anyone logged in.....

<location path="Members">
<system.web>
<authorizatio n>
<deny users="?"/>
</authorization>
</system.web>
</location>

On another folder I want to restrict access only to a member which has
"IsAdministrato r" set to True in the database.

<location path="Admin">
<system.web>
<authorizatio n>
<deny users="*"/>
<allow roles="Admin"/>
</authorization>
</system.web>
</location>

Is this correct? How do I tell FormsAuthentica tion that the current user
has the Admin role?

Thanks
--
Pete
====
Read or write articles on just about anything
http://www.HowToDoThings.com

My blog
http://blogs.slcdug.org/petermorris/

[Saravana]

Check out this article,

How To Implement Role-Based Security with Forms-Based Authentication in Your
ASP.NET Application by Using Visual Basic .NET
http://support.microsoft.com/default...b;EN-US;306238

--
-Saravana
http://dotnetjunkies.com/WebLog/saravana/
www.ExtremeExperts.com

"Peter Morris [Air Software Ltd]" <pe**********@g uess.co.uk> wrote in
message news:em******** *****@TK2MSFTNG P14.phx.gbl...

Hi

I validate the username/password and then execute the following code

System.Web.Secu rity.FormsAuthe ntication.Redir ectFromLoginPag e(
authorId, RememberCheckBo x.Checked
);

One folder I want to restrict to anyone logged in.....

<location path="Members">
<system.web>
<authorizatio n>
<deny users="?"/>
</authorization>
</system.web>
</location>

On another folder I want to restrict access only to a member which has
"IsAdministrato r" set to True in the database.

<location path="Admin">
<system.web>
<authorizatio n>
<deny users="*"/>
<allow roles="Admin"/>
</authorization>
</system.web>
</location>

Is this correct? How do I tell FormsAuthentica tion that the current user
has the Admin role?

Thanks
--
Pete
====
Read or write articles on just about anything
http://www.HowToDoThings.com

My blog
http://blogs.slcdug.org/petermorris/

[Peter Morris [Air Software Ltd]]

Hi

Thanks for the link.

Application_Aut henticateReques t

Does this event get called only once when the user logs in, or every time a
page is requested for which the user must be authenticated?

If it is only called once, do the roles get stored in the persistent cookie,
or on the server somewhere?

Finally, if the roles are on the server, and the user comes back with a
persistent cookie 6 months later, is this event triggered again so that the
roles may be established?

Thank you for your help.
--
Pete
====
Read or write articles on just about anything
http://www.HowToDoThings.com

My blog
http://blogs.slcdug.org/petermorris/

[Saravana]

This event fires for every request. You can check out this link for more
details,
http://msdn.microsoft.com/msdnmag/is...2/default.aspx

--
Saravana
http://dotnetjunkies.com/WebLog/saravana/
www.ExtremeExperts.com
"Peter Morris [Air Software Ltd]" <pe**********@g uess.co.uk> wrote in
message news:ua******** *****@TK2MSFTNG P14.phx.gbl...

Hi

Thanks for the link.

Application_Aut henticateReques t

Does this event get called only once when the user logs in, or every time a page is requested for which the user must be authenticated?

If it is only called once, do the roles get stored in the persistent cookie, or on the server somewhere?

Finally, if the roles are on the server, and the user comes back with a
persistent cookie 6 months later, is this event triggered again so that the roles may be established?

Thank you for your help.
--
Pete
====
Read or write articles on just about anything
http://www.HowToDoThings.com

My blog
http://blogs.slcdug.org/petermorris/