I have two roles in my web application, user and admin, and for security purposes wish that those users in the the "admin" role do not receive a persistent cookie but it's very important for the user exerience that they be allowed to use the persistent cookie.
What is the best way to accomplish this in the lease amount of code? I am able to create a membership user based on the username entered in the code behind, but there are not any options to check against roles in that class. (From what I understand, the roles are saved in the authentication cookie for the user).
So the question is, how do I check if a user is in a role before the ticket is issued for them?
Thanks!
...
Go to the complete details ...