Re-entering user credentials in forms auth.?

From: Kaspian (alipow_at_nospam_wp.pl)
Date: 03/29/04


Date: Mon, 29 Mar 2004 00:21:08 -0800

Hi!
I am not sure how I should approach one problem in my app.
I am building an application in ASP.NET which apart from other things deals with documents.
The users have different roles which allow them to change document status accordingly to their role.

I am using forms authentication, so the user roles are gathered in global.asax as soon as they are authorized. However, when attempting to change the status of the document, I need them to reenter their credentials. With the re-entering, I want the user to prove they really want to change sth in the document, and that they are the valid user, although they have proved that while logging in earlier.

Are there any good practises to accomplish this?
Any advice would be much appreciated!

Thanks,
Kaspian