Search

You searched for the word(s): userid:306344

Matching Posts

  • Re: Wierd logged in, but user doesn't exist anymore scenario

    I wanted to let people know how I resolved this in case someone else has the problem. Since we don't regularly remove registered users from production, we have created a Conditional("DEBUG") method and are calling it in the Global.asax AuthenticateRequest handler. If a request comes in and the HttpContext.Current.User shows IsAuthenticated = true, we verify that the user actually exists in the database. If not, we set the User = null, effectively logging them off. You can see why we
    Posted to Security (Forum) by cromwellryan on 4/17/2008
    Filed under: FormsAuthentication
  • Wierd logged in, but user doesn't exist anymore scenario

    I have a scenario that keeps popping up in our dev and test environment and just recently occurred in our production environment for the first time. I can replicate it the following way, but the Remember Me functionality of Forms Auth can also cause it after the browser is closed: Create a User (we use self registration through the out-of-box ASP.Net Create User Wizard. Login as this user (again Asp.Net login control). We're configured for cookies="AutoDetect" and running IE 7. Delete
    Posted to Security (Forum) by cromwellryan on 4/16/2008
    Filed under: FormsAuthentication
  • Re: Preempt CreateUserWizard step

    I was afraid of that and had started down that path. I had hoped there was a way to "seed" the wizard, but oh well.
    Posted to Security (Forum) by cromwellryan on 3/6/2008
    Filed under: createuserwizard
  • Preempt CreateUserWizard step

    I have a page on my site that is a hybrid login and registration page (Login entry on the left, Registration on the right). The registration side is meant to jumpstart the process of registration, not carry it through in full. My plan had been have the PostBackUrl of the "Create Account" button point to the stand-alone Registration page and pull out the values from the previous page (works just fine). I'm running into trouble, because the Password and ConfirmPassword values being sent
    Posted to Security (Forum) by cromwellryan on 3/5/2008
    Filed under: createuserwizard
  • How to repopulate form on error...

    Is there a decent way to repopulate a view/form when returning based on an error? Is this something planned for the future?
    Posted to ASP.NET MVC (Forum) by cromwellryan on 1/13/2008
    Filed under: Error Handling
  • MVC Error Handling Pattern(s)

    There have been a few posts which ask/discuss different was to deal with errors and validation in this forum, but I thought I'd get a little more general. I've seen questions about Validation and using the Ent Lib stuff, but there's no clean story around that at this point, for good reason. I've also read about the possible implementation of the RescueAttribute or using OnError to handle more global, critical situations. I'm curious what patterns are going to be recommended, built
    Posted to ASP.NET MVC (Forum) by cromwellryan on 1/2/2008
    Filed under: MVC, ASP.NET MVC, Error Handling
  • Re: Security in asp.net MVC application

    There is a post out here which describes setting up the ASP.Net Membership provider with the MVC framework. It uses the <location/> config elements in the samples, but you can easily use declarative or explicit authorizations. I'll look at adding a short extension post about those two options. I would agree that the <location/> config is poorly chosen as it's dependent on the route configuration.
    Posted to ASP.NET MVC (Forum) by cromwellryan on 1/2/2008
    Filed under: MVC, asp.net mvc httpcontext iserviceprovider
  • Re: TraceListener.Close never called when added in config file...

    OK - I found the reason or at least a solution. It appears that the Trace framework waits for all non-background threads to complete before calling close on the dynamically (maybe all) added listeners in the collection. Once I set the IsBackground to true for my worker thread, the main processes no longer hung. In my specific instance, this may turn out back, but we'll see.
    Posted to C# (Forum) by cromwellryan on 2/26/2004
  • TraceListener.Close never called when added in config file...

    I have written a TraceListener which maintains an internal buffer which is managed and by a seperate thread. When this tracelistener is added and closed explicitly in the code, all is well. When I use the system.diagnostics/trace/listeners/add element of the config file, the tracelisteners close method doesn't get called even when the host app is a console and the Main method has left. When I don't create the TraceListeners worker thread the close method is called. Does anyone know why this is? Is
    Posted to C# (Forum) by cromwellryan on 2/26/2004
Page 1 of 1 (9 items)