Hello,
I have a problem with my current web application.
Im currently using a custom login which stores login info in the HttpSessionState. Now i have groups of users, which are only allowed to view images from their own group, which are stored in the user groups folder (cant browse to the images in the url as well).
So now i made the images viewable by ashx scripts that checks if you are logged in, and if you have permissions the ashx outputs an image (with valid content-type). But since a webpage can contain quite a lot of images or files, it gets really slow with all the requests...
Is there another way to give folder permissions for just the current group for the logged in user (without being able to browse directly to them)?
I thought if you can make a temporary folder permission group, add it to the current user and specific folder somehow, you dont have to use ashx files to ...
Go to the complete details ...