Hi all, I have a live ASP.NET 2.0 product running on a 32-bit Windows 2003 box. It is only accessible via our Intranet.
The product uses Windows Authentication to authorize users, who are "limited user" members of our domain. Basically it takes their username and domain and maps them to a user record in our Oracle database. Their associated roles are loaded from DB and stored in in-proc Session state.
So far so good.
Now, after 3 months of no problems, our system has started giving us the same 2 errors on a daily basis. They don't repeat often during the day, strangely enough....
The first error is "you are not authorised to view this page" even when 5 minutes before they were using the page.
The second error is a System.UnauthorizedAccessException in the event log.
The error message is:
System.UnauthorizedAccessException: Attempted to perform ...
Go to the complete details ...