Hi all
I have web app that ive built that has asp membership and roles setup for it. I also have an sql site map that is loaded to a treeview on a master page based on the users role. I have many different roles and i will add new once in the future but i also have pages setup for users that are not in the database at all.
All that works fine, users see the menu they need to see and all good, But if a user types in a url manually, lets say an admin page url. then they can still access it. How can i make sure that if a user doesnt have access the page will redirect. I know i can use the web.config, but i want it to be dynamic and i dont want to hardcode that thing.
Any ideas?
...
Go to the complete details ...