Hi all
In my login form (forms authentication) I check that the login is valid,
retrieve an "Author" object, and keep track of the author's roles.
string[] roles;
if (author.IsAdmin istrator)
roles = new string[] {"Admin", "Member"};
else
roles = new string[] {"Member"};
Cache.Add(autho r.UniqueId, roles, null, DateTime.MaxVal ue,
TimeSpan.FromHo urs(1), CacheItemPriori ty.BelowNormal, null);
In my Global.asax.cs file I execute the following code in order to ensure
that the author's roles are available to forms authentication. ..
protected void Application_Aut henticateReques t(Object sender, EventArgs e)
{
if (HttpContext.Cu rrent.User != null)
{
IIdentity userId = HttpContext.Cur rent.User.Ident ity;
//Do we have some roles to retrieve? If so, replace the user object
if (HttpContext.Cu rrent.Cache[userId.Name] != null)
{
string[] roles = (string[]) HttpContext.Cur rent.Cache[userId.Name];
HttpContext.Cur rent.User =
new System.Security .Principal.Gene ricPrincipal(us erId, roles);
}
}//user != null
}
The problem I have is that the host site seems to keep changing its mind as
to whether or not my login has the "Admin" role or not.
<location path="Admin">
<system.web>
<authorizatio n>
<allow roles="Admin"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
Whenever I am navigating my way around within the /Admin folder, I will
(apparently randomly) be redirected to the Login page as if I were not an
Admin, or not authenticated. However, refreshing the /Admin/whatever.aspx
url repeatedly will eventually allow me to continue.
This fact is reflected in my menu control. I have an "Administration "
section which is displayed/hidden depending on
HttpContext.Cur rent.User.IsInR ole("Admin");
Repeatedly refreshing any page at all, including a page with no
restrictions, will (apparently randomly) show/hide the Administrator menu
items.
Can anyone shed some light onto this behaviour? The last point made seems
to indicate that the user identity is being lost somehow.
Thanks
--
Pete
====
ECO Modeler, Audio compression components, DIB graphics controls,
FastStrings
http://www.droopyeyes.com
Read or write articles on just about anything
http://www.HowToDoThings.com
My blog
http://blogs.slcdug.org/petermorris/
