Forms Authentication Roles

[Brian Shannon]

If you are using roles and assigning them from a SQL 2000 DB to the generic
principal can you still use the web.config file to check authorization?

All the articles I have read has the code behind
If user.IsInRole("Admin")
'Do whatever
End IF

Can't you use the web.config file if populating roles form the DB to check
if you are authorized? It seems foolish if you have to use code behind. If
you want to change roles then you have to recompile your project.

Any feedback is appreciated

 

[Teemu Keiski]

Hi,

Yes, you can place authorization checks into web.config for roles which are
populated from db to the current user's details.
See this article for an example:
http://www.codeproject.com/aspnet/formsroleauth.asp