November Happy Hour will be moved to Thursday December 5th.

Change users role while loged in

Vote:
 

Hi!

Im trying to change a user's role while he is logged in. I want him to be able to switch between "admin" and "user" in my system and based on that give hime access to different pages.

 

Basically I want to do something like this:

 

var usersCurrentRoles = Roles.GetRolesForUser(username);
if (usersCurrentRoles.Length > 0)
{
Roles.RemoveUserFromRoles(username, usersCurrentRoles);
}
Roles.AddUserToRole(username, role);

 

and the roles are changed for the user, if I check in Admin mode. But my Menu list does not change and my user can still access the same pages.

 

Do I need to logout and then login again for the roles to be effective?

 

br

Andreas

#70350
Apr 17, 2013 16:56
Vote:
 

It depends on if you have set cacheRolesInCookie on your role provider in web.config. If you use cache the roles, the user needs to re-login or close and re-open the browser.

Not all methods calls the cookie, eg GetRoles doesn't but IsInRole uses the cached roles.

#70378
Apr 18, 2013 9:18
Vote:
 

Hi!


It's little bit risky in our project to disable cacheRolesInCookie for the whole site, we want to di sable it for just some part of the site.Will it be working if we define a new <location path=””> & disable the cache just for the specific part of the site?

 

/Maryam

#73099
Edited, Jul 05, 2013 13:54
Vote:
 

I guess you could set the path for the cookie, please see the "Controlling Cookie Scope" section here http://msdn.microsoft.com/en-us/library/ms178194%28v=vs.100%29.aspx. And you could aslo call the role methods that doesn't check the cookie.

Your proposed solution will not work.

#73100
Jul 05, 2013 14:01
Vote:
 

Thanks Johan for very quick response :-) I will try that!

#73101
Jul 05, 2013 14:03
This thread is locked and should be used for reference only. Please use the Episerver CMS 7 and earlier versions forum to open new discussions.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.