Dear all,
I have a very basic doubt regarding how user.IsInRole() works.
My application uses windows authentication. I have an user object which queries the active directory to retrieve the user name, email address, user groups etc. I'm particularly interested about the user groups here.
Now i need to authenticate the user based on the user groups he belongs to. Should I validate it against the previously obtained user object ? Or can i use the windows principal class and use the User.IsInRole() method to authenticate?
If i use the latter, does that mean i need not make a call to the AD at all in the first place? I'm a bit confused.Can some one explain in clear words what User.IsInRole() check against? All the articles i have read so far are not satisfactory.
...
Go to the complete details ...