Re: Form Authentication and logged in users (newbie)

From: Brock Allen (ballen_at_NOSPAMdevelop.com)
Date: 11/17/05 

Date: Thu, 17 Nov 2005 12:26:05 -0800

You need to look into the various forms of state management. Off the top
of my head you have 3 options:

1) Always go back to the database every time for whatever data you need
2) Upon login load the commonly used data and store it in session state
3) Demand load the data and store it in the data cache

The downside of #1 is that you'll make lots of roundtrips to the database
for the same data. This is wasteful. The downside with #2 is that session
is brittle if stored InProc (which is the default) and it's somewhat inefficient
if you use an Out of Proc mode. The upside of #2 is that it's fairly easy.
Personally I like #3, as it's a compromise.

-Brock
DevelopMentor
http://staff.develop.com/ballen

> Hello I appreciate some guidance on Form based authentication. On a
> training project I successfully log in and off users with simple the
> simple
> Form authentication.
> I am not storing credentials on the webconfig but on a DataBase, I
> followed
> the article from Microsoft at the following address:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;308157
> All works fine but how do I get the information from the user that has
> logged in on the protected page. On the page that the user reaches
> after logging in I might want to add his/her name and consequently any
> additional information. In my case I will be needing the ID of the
> user logged in to display related content.
>
> Where should I look for answers? Can you give also some resources
> where I can study on?
>
> Thank you in advance.
> Lorenzo