How do I synchronise Role Based Security ?

From: Fresh Air Rider (Fresh_Air_Rider_at_Hotmail.com)
Date: 03/21/04

  • Next message: Joe Bloggs: "Copy data between objects using reflection" 
    Date: 21 Mar 2004 13:46:56 -0800

    Hi All

    I have written a website in DotNet (C#) which uses Role-based Security
    with Forms Authentication
    When a user logs in, their roles are retrieved from a SQL Server
    database and an authentication ticket is created.

    My only problem is that a User should only have to login every few
    months but I want any changes made to a users permissions record in
    the database to be picked up every time the user logs in.

    In other words, if a user has been granted an "Admin" role and then
    has this role revoked because they have misused it, I want the user to
    be prevented from accessing the "Administration" area next time he or
    she accesses the website.

    I'm guessing that I Would need to update the
    FormsAuthenticationTicket, possibly within the Session_Start section
    of Global.asax.cs

    If anyone could please give me some advice or a URL of an article
    which covers this then I would be very grateful.

    Many thanks in advance
    John

  • Next message: Joe Bloggs: "Copy data between objects using reflection"

    Relevant Pages

    • How do I keep a FormsAuthenticationTicket up to date ?
      ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
      (microsoft.public.dotnet.security)
    • How can I keep a FormsAuthenticationTicket updated ?
      ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • How do I synchronise Role Based Security ?
      ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
      (microsoft.public.dotnet.faqs)
    • How do I synchronise Role Based Security ?
      ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
      (microsoft.public.dotnet.security)
    • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
      ... > By this, I mean, usually, on the basic logon screen of a server, I see ... >>;) under the website in question, enabling only Basic authentication. ... and can use the local administrator account to successfully ...
      (microsoft.public.inetserver.iis.security)