Author: jamesewelch | Posted on: 9/30/2010 1:45:32 PM | Views : 512

I'm using a Custom Role Provider for authorization.
There are 2 roles: "VIEWER" and "SYSTEM_ADMINISTRATOR".
I have set up my role for my account as "VIEWER".


Roles.GetRolesForUser(this.User.Identity.Name) returns "VIEWER"
User.IsInRole("SYSTEM_ADMINISTRATOR") returns false



Web.Config contains below:

<location path="Administration">
    <system.web>
      <authorization>
        <allow roles="SYSTEM_ADMINISTRATOR"/>
        <deny users="*"/>
      </authorization>
    </system.web>
  </location>
However, I can still access the ~/Administration pages.


Even if I change ...

Go to the complete details ...