forms authentication

[z f]

Hi,

In forms Authentication, if a page was redirected to a login page, and the
login was successfull, but the logged in user is not included in the
required roles for a directory using web.config with forms authentication,
the page is redirected to the login page again, without any friendly message
to the user about the reason for the login again.

is there a solution for this?

TIA.

 

[Guest]

Hi,

This is the default behaviour of the forms url authentication module.

Working around this behaviour would be tough - you will have to check the
config files and find out whether the current user is authorized to view the
resource or not, and then manually redirect. Unfortunately, the classes for
reading this info from .config files are all marked as internal and hence can
not be used - you will have to write your own classes.

I faced this same requirement (and a few others) some months back - the
final solution i took was to write an HTTP module similar to the Forms
module. Needless to say, we would have immese flexibility in this approach -
maybe you would like to try it out.