IsInRole problem?

[Dave]

Hi,

I'm testing the IsInRole method on my app. I'm using Integrated security so
I'm not sure if that has something to do with it. I have a groups table
which I want to secure certain portions of my application.

In the global.asax:

protected void Application_Acq uireRequestStat e(Object sender, EventArgs e)
{
if (Request.IsAuth enticated)
{
string[] arrRoles = new string[]{"Manager", "Cleaner"};
System.Threadin g.Thread.Curren tPrincipal = new
System.Security .Principal.Gene ricPrincipal(Co ntext.User.Iden tity, arrRoles);
}
}

In a page secured by integrated security I get "false" for the following code:

Context.User.Is InRole("Manager ") //-returns false when I thought it should
be true?

Thanks

[Raterus]

I'd really create my own object to keep track of these roles. Attaching to the context works great for a forms-authentication app, but when you throw windows authentication into the mix, by default, IsInRole will be checking active directory groups. You are essentially trying to overwrite this, which to me doesn't seem like a good idea. You'll have a lot more flexibility down the road if you create your own object to check these roles, and just store that in the session.
--Michael

"Dave" <Da**@discussio ns.microsoft.co m> wrote in message news:F1******** *************** ***********@mic rosoft.com...

Hi,

I'm testing the IsInRole method on my app. I'm using Integrated security so
I'm not sure if that has something to do with it. I have a groups table
which I want to secure certain portions of my application.

In the global.asax:

protected void Application_Acq uireRequestStat e(Object sender, EventArgs e)
{
if (Request.IsAuth enticated)
{
string[] arrRoles = new string[]{"Manager", "Cleaner"};
System.Threadin g.Thread.Curren tPrincipal = new
System.Security .Principal.Gene ricPrincipal(Co ntext.User.Iden tity, arrRoles);
}
}

In a page secured by integrated security I get "false" for the following code:

Context.User.Is InRole("Manager ") //-returns false when I thought it should
be true?

Thanks

[Elton Wang]

Hi Dave,

Role name like user name should also include domain name:

User.IsInRole(" Your_Domain_Nam e\Manager")

HTH

Elton Wang
el********@hotm ail.com

-----Original Message-----
Hi,

I'm testing the IsInRole method on my app. I'm using Integrated security soI'm not sure if that has something to do with it. I have a groups tablewhich I want to secure certain portions of my application.

In the global.asax:

protected void Application_Acq uireRequestStat e(Object sender, EventArgs e){
if (Request.IsAuth enticated)
{
string[] arrRoles = new string[] {"Manager", "Cleaner"}; System.Threadin g.Thread.Curren tPrincipal = newSystem.Securit y.Principal.Gen ericPrincipal (Context.User.I dentity, arrRoles); }
}

In a page secured by integrated security I get "false" for the following code:
Context.User.I sInRole("Manage r") //-returns false when I thought it shouldbe true?

Thanks

.