.NETGURU
implementing authentication & authorization using custom HTTPModule
Messages   Related Types
This message was discovered on microsoft.public.dotnet.distributed_apps.

Post a new message to this list...

mallik
I am trying to implement Authentication and Authorization using a custom HTTPModule.

Scenario :
A simple asp.net application(uses 'integrated windows authentication'). I need to capture the user credentials(windows) and based upon the user roles(in the sqlserver database), either allow or deny the requested page(url).

Instead of doing this 'authorization' on each and every page(in Page_Load only during initial load not during the postbacks), I am trying to intercept the user requests in a custom HttpModule using 'OnAuthenticate' & 'OnAuthorize' events.

Problem :
Everything seems to be working fine... except that 'OnAuthenticate' & 'OnAuthorize' are called both during the initial Page_Load and also during PostBack. I don't want to unnecessarily Authenticate & Authorize during page Postbacks.
Is there any way to restrict this in HttpModule ?

Hope this is clear & appreciate any suggestions/comments.

Thank you,
Reply to this message...
 
    
Scott
Why would you not want to authenticate and authorize postbacks? A postback is just a page request just like any other. Just curious.

Scott L.
"mallik" <Click here to reveal e-mail address> wrote in message news:Click here to reveal e-mail address...
I am trying to implement Authentication and Authorization using a custom HTTPModule.

Scenario :
A simple asp.net application(uses 'integrated windows authentication'). I need to capture the user credentials(windows) and based upon the user roles(in the sqlserver database), either allow or deny the requested page(url).

Instead of doing this 'authorization' on each and every page(in Page_Load only during initial load not during the postbacks), I am trying to intercept the user requests in a custom HttpModule using 'OnAuthenticate' & 'OnAuthorize' events.

Problem :
Everything seems to be working fine... except that 'OnAuthenticate' & 'OnAuthorize' are called both during the initial Page_Load and also during PostBack. I don't want to unnecessarily Authenticate & Authorize during page Postbacks.
Is there any way to restrict this in HttpModule ?

Hope this is clear & appreciate any suggestions/comments.

Thank you,
Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification