I have an ASP.NET 2.0 web application that is using Forms Authentication.  I was trying to create a custom principal object by inheriting from GenericPrincipal and setting Thread.CurrentPrincipal to the new custom principal object.  I was setting Thread.CurrentPrincipal inside the FormsAuthentication_OnAuthenticate method in the Global.asax file.  Things compile and run however when I set a break point and look at the principal type stored in Thread.CurrentPrincipal it is not my custom principal object but a principal boject called RolePrinciple.  Needless to say I'm a bit confused.  Can anyone tell me if I'm setting this correctly?

 Thanks, Steve.

Hi,

From your description I have concluded that you create an instance of GenericPrincipal, and assign it Three.CurrentPrincipal (correct?). If you do that, then it means that your generic principal will hold same type of principal which was in Thread.CurrentPrincipal. For this I recommend that you create a new principal object and pass it required data capturing it from either Thread.CurrentPrincipal or Request and then assign that instance to Thread.CurrentPrincipal again. You can create your own custom principal class, which can handle all other related items for you.
 

Hi

Here you can get more information on creating a new instance of the security principal

http://www.4guysfromrolla.com/webtech/121901-1.2.shtml