Re: Another user's data is populated in my page



"GSN Sarma via .NET 247" <anonymous@xxxxxxxxxxxxx> wrote in message
news:%23$V8u9nXFHA.3040@xxxxxxxxxxxxxxxxxxxxxxx

I have a list box in my ASP.NET web page. The list box is populated on page
load event with names of the employees of a department. The department is
decided depends on the login. But when a user from department "A" logs in,
he is shocked to see employees of other department in his list box i.e.
other than A. He logs out and re logs the problem is solved he gets back his
employees. This problem frequently occurs.

>What could be the problem?

How are you evaluating who the current user is?

When users log in, are you storing information about them (userID,
department etc) in an unsafe way so that another user could overwrite the
details of an already logged-in user?


.



Relevant Pages

  • Re: Securing workstations from IT guys
    ... If you can't trust the employees, ... then download the logs each day. ... This electronic transmission is intended for the addressee named ... otherwise protected from use and disclosure. ...
    (Security-Basics)
  • Re: Proof of personal Internet Usage
    ... employees supposed to track it? ... internet and a printout of all the sites that she visited. ... If she goes to a page then the logs will show it and all its contents. ... If I visit news.bbc.co.uk at 1305 hours there will be a raft of entries ...
    (uk.legal)
  • Re: Percentages would be interesting...[was Re: Ryanair - Scary as Fuck
    ... but that does not mean their planes are unsafe. ... According to A Company Spokesman, they still issue share options to ... How many employees get them I don't know. ...
    (soc.culture.irish)