Hi.

If you modify the Login control in the .vb of your Log in file, will you still be able to use roles to secure your site?

Because after I modified the Login control code in .vb file, roles do now seem to take effect

How did you modify it?  Did you handle the authentication yourself?

Protected Sub Login1_Authenticate(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.AuthenticateEventArgs) Handles Login1.Authenticate

I did that and a bunch more code ...does it over-ride the login control authentication that uses the web-admin tool? ?

That's what I thought you were overriding.

So you're probably setting the cookie in this method.  So then what you're going to need to do is store the roles in the cookie and then upon each request setup the IPrincipal and IIdentity objects.  Typically people place the roles in a delimited string into the UserData property of the FormsAuthenticationTicket.  Then parse it on the request.

Let me know if you need any help with that. 

Ok. I'm going to try it. Thnx for your help

check this thread

are you using the membership database ? or you have your own tables and you want to use asp.net security ? all discussed in this thread .

http://forums.asp.net/p/1272463/2409372.aspx

VII-Twilight:

Hi.

If you modify the Login control in the .vb of your Log in file, will you still be able to use roles to secure your site?

Because after I modified the Login control code in .vb file, roles do now seem to take effect

You mean don't?

If you are using the ASP.NET membership, you can validate the user account using the Membership API and still can use the roles defined on your RoleProvider

e.g.

On button click (say of your customized login control)

Dim username as string
Dim password as string
Dim isvalid as boolean
 

username = textbox1.text 'assuming username textbox has an id of textbox1
password = textbox2.text 'assuming password textbox has an id of textbox2

isvalid = membership.validateuser(username, password)

if isvalid = true then

formsauthentication.setauthcookie(username, true)

'do more logic 

' to get the roles associated with the user, you can use the Roles.GetRolesForUser(username) and throw it to a string array

end if