How can I keep a FormsAuthenticationTicket updated ?

From: Fresh Air Rider (Fresh_Air_Rider_at_Hotmail.com)
Date: 03/23/04 

Date: 23 Mar 2004 10:57:19 -0800

Hi All

I have written a website in DotNet (C#) which uses Role-based Security
with Forms Authentication
When a user logs in, their roles are retrieved from a SQL Server
database and an authentication ticket is created.

My only problem is that a User should only have to login every few
months but I want any changes made to a users permissions record in
the database to be picked up every time the user logs in.

In other words, if a user has been granted an "Admin" role and then
has this role revoked because they have misused it, I want the user to
be prevented from accessing the "Administration" area next time he or
she accesses the website.

I'm guessing that I Would need to update the
FormsAuthenticationTicket, possibly within the Session_Start section
of Global.asax.cs

If anyone could please give me some advice or a URL of an article
which covers this then I would be very grateful.

Many thanks in advance
John

Relevant Pages

  • How do I synchronise Role Based Security ?
    ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
    (microsoft.public.dotnet.csharp.general)
  • How do I synchronise Role Based Security ?
    ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
    (microsoft.public.dotnet.security)
  • How do I keep a FormsAuthenticationTicket up to date ?
    ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
    (microsoft.public.dotnet.security)
  • How do I synchronise Role Based Security ?
    ... I have written a website in DotNet which uses Role-based Security ... When a user logs in, their roles are retrieved from a SQL Server ... database and an authentication ticket is created. ... the database to be picked up every time the user logs in. ...
    (microsoft.public.dotnet.faqs)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... > By this, I mean, usually, on the basic logon screen of a server, I see ... >>;) under the website in question, enabling only Basic authentication. ... and can use the local administrator account to successfully ...
    (microsoft.public.inetserver.iis.security)