Losing custom identity

martymcdonald_at_comcast.net
Date: 07/29/05 

Date: 29 Jul 2005 06:35:08 -0700

For authentication we are using an external DB. I can use Forms
authentication and use the loginUrl="MyLoginForm.aspx" just fine. But
for authorization, we cannot use a static list of roles for people,
their authorization depends on factors which change as they use the
system.

We must determine roles on every page hit, using information in our
custom identity, which is changed as user uses system. I examine
custom identity, determine roles, create principal accordingly, then
attach it to HttpContext.Current.User. But after redirecting to
another page, the HttpContext.Current.User identity reverts back to a
"Windows" identity and also the principal's information is gone too
(reverts to generic principal without my role info).

How does one modify the HttpContext.Current.User and have it persist
between redirects? Thanks!

Relevant Pages

  • asp.net vulnerability
    ... From: Windows NTBugtraq Mailing List ... More details on ASP.NET vulnerability ... There has been some confusion with the ASP.NET forms authentication issue ... authorization issue, not an authentication issue. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: application pool custom identity
    ... Kerberos becomes a possibility when the web server is in a Domain, ... The problem happens when the browser/server selects Kerberos authentication, ... LocalSystem credentials will work for Kerberos; custom AppPool Identity ... Authorization. ...
    (microsoft.public.inetserver.iis)
  • Re: Kerberos OpenLDAP Frontend
    ... Jonathan Javier Cordoba Gonzalez wrote: ... but then you are mixing the authentication with the authorization. ... A KDC with passwords and LDAP ...
    (comp.protocols.kerberos)
  • Re: ASP.NET Authentication exception case
    ... It doesn't seem to like the authorization tag underneath the location tag ... This section sets the authentication policies of the application. ... <!-- SESSION STATE SETTINGS ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Brackets across includes
    ... I am trying to create a user authentication system, ... separate the authentication code into include files. ... separate concepts and should be implemented as separate procedures. ... Authorization could be ...
    (comp.lang.php)