Storing Role And User Id in UserData of FormAuthenticat ion

[Jamie Pollard]

hello,

i have been scouring the groups for the best possible solution to this
problem, but can't seem to find my exact scenario, so hopefully someone
can get me back on the right path. my situation is the following:

i have a asp.net app that uses formsauthentica tion, and in the UserData
field we store the role value of what the user is (ie admin, user,
etc.). i want to also store the user id in this UserData field so i
have added that and separated it by a comma, so the value would look
something like "Admin,123" . so on the Application_Aut henticateReques t
event in global.asax.vb i can easily split the values on the comma and
then have the roles which are used in:

HttpContext.Cur rent.User = New GenericPrincipa l(id, asRoles)

to verify whether they have access to certain directories or whatnot.
but within this GenericPrincipa l there doesn't seem to be a place to
store this User Id value and have it readily available from each page.
i know you can do something like HttpContext.Cur rent.User.Ident ity.Name
and that will give you the name value that you stored in the
formsauthentica tion ticket, but there still isn't a way to get the user
id. i tried setting a session variable in the
Application_Aut henticateReques t event to store the user id, but kept
getting an error; my thinking was that this way the authentication and
session would still be in sync because every time the user
authenticated, the session variable would be set (and i wouldn't be
using the session variable on pages that did not require
authentication) . i have also seen where the id is appended to the Name
in the ticket, and then split out, but that doesn't seem very .net like
to me.

so i guess my question is what am i missing? most examples i have seen
just store the "roles" in the user data field, and not multiple types
of data like user id, first name, last name, etc.

thanks to any and all who respond,
jamie

[societopia.net]

Hi Jamie:

After you have assigned the GenericPrincipa l to the
HttpContext.Cur rent.User, you can always retrieve the User ID back from the
FormsAuthentica tionTicket in the Context.User.Id entity:

CType(CType(CTy pe(Context.User .Identity,
System.Security .Principal.IIde ntity),
System.Web.Secu rity.FormsIdent ity).Ticket,
System.Web.Secu rity.FormsAuthe nticationTicket ).UserData

---
www.societopia.net
"Jamie Pollard" wrote:

hello,

i have been scouring the groups for the best possible solution to this
problem, but can't seem to find my exact scenario, so hopefully someone
can get me back on the right path. my situation is the following:

i have a asp.net app that uses formsauthentica tion, and in the UserData
field we store the role value of what the user is (ie admin, user,
etc.). i want to also store the user id in this UserData field so i
have added that and separated it by a comma, so the value would look
something like "Admin,123" . so on the Application_Aut henticateReques t
event in global.asax.vb i can easily split the values on the comma and
then have the roles which are used in:

HttpContext.Cur rent.User = New GenericPrincipa l(id, asRoles)

to verify whether they have access to certain directories or whatnot.
but within this GenericPrincipa l there doesn't seem to be a place to
store this User Id value and have it readily available from each page.
i know you can do something like HttpContext.Cur rent.User.Ident ity.Name
and that will give you the name value that you stored in the
formsauthentica tion ticket, but there still isn't a way to get the user
id. i tried setting a session variable in the
Application_Aut henticateReques t event to store the user id, but kept
getting an error; my thinking was that this way the authentication and
session would still be in sync because every time the user
authenticated, the session variable would be set (and i wouldn't be
using the session variable on pages that did not require
authentication) . i have also seen where the id is appended to the Name
in the ticket, and then split out, but that doesn't seem very .net like
to me.

so i guess my question is what am i missing? most examples i have seen
just store the "roles" in the user data field, and not multiple types
of data like user id, first name, last name, etc.

thanks to any and all who respond,
jamie

[Jamie Pollard]

wow, thanks a bunch, that is exactly what i needed. i'm kinda confused
by that statement though. could you please explain how that is working?

thanks,
jamie

[societopia.net]

"Jamie Pollard" wrote:

wow, thanks a bunch, that is exactly what i needed. i'm kinda confused
by that statement though. could you please explain how that is working?

thanks,
jamie

You are welcome. In your original code you created a GenericPrincipl e
object using a FormsAuthentica tionTicket. Therefore all you needed was to
retrieve the UserData property of the FormsAuthentica tionTicket. (The
UserData has the User ID value that you were looking for)

---
www.societopia.net

[Jamie Pollard]

yeah, i realized that part. i guess i just figured that there wasn't an
easy way to access that data without creating the ticket again and
extracting the data like in the Application_Aut henticateReques t Sub.
but this does exactly what i want. i guess my main questions is with
all the ctypes and everything? i mean i know what ctype does, just
kinda don't know how it's actually working.

thanks,
jamie