Basically my application is a  car maintenance. Each user can able to see list of shops detail according to their permission.

For example shop 1 employees cann't  be able to see shop2 details. I am storing their shop number in session id when they login first time  in the system.

 But the issue is, shop 1 employees  are able to see shop 2 details in the middle of the shop 1 process. Same thing happens in shop 2 too. Shop 2 employees are able to see shop 1 details while creating repair order for shop2.

If any one helps me ... I am really appreciate

     Thanks

In which part of your application you are facing this problem??

Where you are storing the session and retrieving back??

And where you are displaying the details based on the session value?? 

Give some code sample so that I can get a clear idea...

 Hi,

in pageload method you have to write conditions as per your requirement.

if user1=page1.user then

do someting

endif

if you need more information paste your code snippets here so any one guide you.

Thanks :)

Well,

It depends on how you are handling Shops manipulation in your application. In the Page_Load event you can put some check like

if(Session["ShopID"]!="Shop1")

{

Response.Redirect("Unauthorized.aspx");

}

to prevent "Shop2" users access a page specifically meant for "Shop1" users.

Hope it helps.

 Hi RITE05,

You should double check the Session object before comparing the Session objects value.

I assume that you use the if state to redirect the user to detail page.

If the Session object lost, your application will redirect to wrong page.

So, please try to add the following code:

if(Session["shopnumber"]!=null)
{
if(Session["shopnumber"]=="Shop1")
{
Response.Redirect("Shop1.aspx");
}
else
{
Response.Redirect("OtherShop.aspx");
}
}
else
{
//redirect to the login page
}

I hope it is helpful to you, if you have any questions, please feel free to let me know.

RITE05 thanks for your post.

Your question is not clear, at one place you told

Each user can able to see list of shops detail according to their permission.

in another place

But the issue is, shop 1 employees  are able to see shop 2 details in the middle of the shop 1 process. Same thing happens in shop 2 too. Shop 2 employees are able to see shop 1 details while creating repair order for shop2.

i'm confused tell me, what exact you want? so that i can help you.