Re: RolePrincipal vs Custom Principal



well - you end up with a RolePrincipal because RoleManager is enabled - just disable it and you don't have to "hack" your way trough...

<roleManager enabled="false" />

-----
Dominick Baier (http://www.leastprivilege.com)

Its ok found the answer in this group - use the postauthenticate
event!! works fine.

LetoLtd wrote:

I have a custom IPrincipal class that I setup and put into
Context.User in the Application_AuthenticateRequest, all works fine.

However when I check the HttpContext.Current.User in a page my Custom
IPrincipal has been overwritten by the RolePrincipal class, how do I
stop it doing this?

Thanks



.