I created an application (C#, asp.net 2.0) which has integrated security and searches for Active Directory for the user's groups.
When an user enters the webapp by the default.aspx page, this page calls the procedure that pulls all the premissions based on activity directory groups (permission are created/stored in a session["permissions"]). If an user has no permissions, they see everything in readonly (all cmd buttons are disabled).
Problem occurs when users bookmark pages (they end up skipping the default.aspx). As a result, a user that has manager level permissions will end up with pages in read only because they skipped the default.aspx (that pulls the user's permission).
Forms Auth made this process easy by forcing users to validate themselves first by login (Ex: default.aspx) . So a user can't bookmark and skip the default page. Is there something similar with Integrated ...
Go to the complete details ...