问题
I was considering using the custom MembershipProvider / RoleProviders.
Unfortunately, the security layer we currently have requires some session stuff being set. So, when the IsUserInRole() method is called, the Session object is always null, due to the Session stuff being all prepopulated.
Any suggestions on how I would be able to work around this, and retain the use of the Session based security model we have?
(I didn't write it, and I have got to use it).
Any help greatly appreciated as always.
回答1:
Might need some code on this.
It's almost certain you will need read access to your session as it sounds like some authorisation flag is kept there?
This might rule this out for you, have a read of this forum, note ScottGu's answers
来源：https://stackoverflow.com/questions/1425731/custom-roleprovider-using-session