RE: Storing Role And User Id in UserData of FormAuthentication

From: societopia.net (societopianet_at_discussions.microsoft.com)
Date: 07/14/05 

Date: Thu, 14 Jul 2005 12:09:02 -0700

Hi Jamie:

After you have assigned the GenericPrincipal to the
HttpContext.Current.User, you can always retrieve the User ID back from the
FormsAuthenticationTicket in the Context.User.Identity:

CType(CType(CType(Context.User.Identity,
System.Security.Principal.IIdentity),
System.Web.Security.FormsIdentity).Ticket,
System.Web.Security.FormsAuthenticationTicket).UserData 

---
www.societopia.net
"Jamie  Pollard" wrote:
> hello,
> 
> i have been scouring the groups for the best possible solution to this
> problem, but can't seem to find my exact scenario, so hopefully someone
> can get me back on the right path. my situation is the following:
> 
> i have a asp.net app that uses formsauthentication, and in the UserData
> field we store the role value of what the user is (ie admin, user,
> etc.). i want to also store the user id in this UserData field so i
> have added that and separated it by a comma, so the value would look
> something like "Admin,123". so on the Application_AuthenticateRequest
> event in global.asax.vb i can easily split the values on the comma and
> then have the roles which are used in:
> 
> HttpContext.Current.User = New GenericPrincipal(id, asRoles)
> 
> to verify whether they have access to certain directories or whatnot.
> but within this GenericPrincipal there doesn't seem to be a place to
> store this User Id value and have it readily available from each page.
> i know you can do something like HttpContext.Current.User.Identity.Name
> and that will give you the name value that you stored in the
> formsauthentication ticket, but there still isn't a way to get the user
> id. i tried setting a session variable in the
> Application_AuthenticateRequest event to store the user id, but kept
> getting an error; my thinking was that this way the authentication and
> session would still be in sync because every time the user
> authenticated, the session variable would be set (and i wouldn't be
> using the session variable on pages that did not require
> authentication). i have also seen where the id is appended to the Name
> in the ticket, and then split out, but that doesn't seem very .net like
> to me.
> 
> so i guess my question is what am i missing? most examples i have seen
> just store the "roles" in the user data field, and not multiple types
> of data like user id, first name, last name, etc.
> 
> thanks to any and all who respond,
> jamie
> 
>

Relevant Pages

  • Re: ADAM - SSO and provisioning considerations
    ... install an OU, do LDAP bind's to AD for authentication, and used some ... The above illustrates why you don't need ADAM. ... store for your identity store. ... they are all in the customer's identity store. ...
    (microsoft.public.windows.server.active_directory)
  • Re: half rendered page on first load :-( after refreshing everything is fine
    ... implemented the FormsAuthentication and set the "loginUrl". ... #.NET Framework Developer's Guide Simple Forms Authentication ... productive server or is it possible that the the ASP.NET can't find the ...
    (microsoft.public.dotnet.framework.aspnet)
  • IIS Basic Authentication/FormsAuthentication - HELP PLS!?
    ... authentication to the request, therefore, allowing users into the secure ... FormsAuthentication with the directory set to Basic Authentication. ... tries to go into the Basic secured directory, I get a browser prompt. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Storing Role And User Id in UserData of FormAuthentication
    ... field we store the role value of what the user is (ie admin, user, ... formsauthentication ticket, but there still isn't a way to get the user ... my thinking was that this way the authentication and ... just store the "roles" in the user data field, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Storing Role And User Id in UserData of FormAuthentication
    ... >> i have a asp.net app that uses formsauthentication, ... >> so i have added that and separated it by a comma, ... >> authentication and session would still be in sync because every time ...
    (microsoft.public.dotnet.framework.aspnet.security)