Re: role based security



it fires on every request like every pipeline event.

if you want to optimizie role handling then you can cache the roles in the forms authentication ticket - this is a popular approach and should be google'able.

-----
Dominick Baier (http://www.leastprivilege.com)

Yes authenticateRequest works fine but it fires a little bit too
often. I am looking for something better.

"Dominick Baier" wrote:

Then search for a module that handles the AuthenticateRequest event
(or global.asax)
- i guess somewhere users are put into custom roles
-----
Dominick Baier (http://www.leastprivilege.com)
Active directory is very seldom used on a web server and I am not
using it either.

"Patrick.O.Ige" wrote:

Well Arne it would be the best to ask your Network Admin whether
there is a
GROUP or Role in Active Directory called
price list. Or maybe you have a BUILT IN roles in your windows
system.
Patrick
** if yes then the code you posted is checking whether the user
logged in
belongs to that ROLE
"Arne Garvander" <ArneGarvander@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:D1693BDF-2910-4824-A92F-D248D19033BE@xxxxxxxxxxxxxxxx
I inherited an Asp.net 1.1 web app with the following line if
(Page.User.IsInRole("price list")) ...

How do I get anyone in to a role?
Does it have anything to do with Windows security?
--
Arne Garvander
(I program VB.Net for fun and C# to get paid.)


.



Relevant Pages

  • Re: role based security
    ... Then search for a module that handles the AuthenticateRequest event - i guess somewhere users are put into custom roles ... Dominick Baier ... Does it have anything to do with Windows security? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: custom Asp.Net 2 Forms Authentication question
    ... feature. ... Dominick Baier - DevelopMentor ... > I want to place authentication ticket into query string (or use ...
    (microsoft.public.dotnet.framework.aspnet.security)