I am designing a web site in which I show the LoginStatus ASP.NET in every page which is located in a masterpage. Some restricted pages are shown only if the user belongs to a role called ADMINISTRATORS but I am having the following behavior:
1. I login with an account that belongs to the ADMINISTRATORS role.
2. I intentionally type the URL of a restricted page directly.
3. I get to the page correctly and, because every page has a LoginStatus control, this page shows the Logout option.
4. I click the logout option and I am taken to the original page.
5. Again, I intentionally type the URL of a restricted page directly and I get to such a page although I logged out in step 4. The Page_Load event checks if a user is authenticated (Request.IsAuthenticated) and if not then the Login page should be displayed. It seems that the page is taken from cache (or something like that) because if I press the F5 key (refresh) then I am taken ...
Go to the complete details ...