Hi,
I'm following the security tutorials posted on asp.net and have encountered a problem. In the user-based authorization tutorial there is a piece of code that redirects an authenticated-unauthorizired user to an appropriate page.
if (!Page.IsPostBack)
{
if (Request.IsAuthenticated && !string.IsNullOrEmpty(Request.QueryString["ReturnUrl"]))
// This is an unauthorized, authenticated request...
Go to the complete details ...