So we are using the ASP.net membership / roles within our site. And just found that once a user logs in to the site and tries to access a page directly without using a link they can get to the page(sometimes blank or sometimes get errors) but they are not
suppose to be able to get to the page to begin with.
If I don't login and try to go to the page, im instantly redirected to the login page and if I login successfully then im redirected back to the page.
How can we accomplish the same type of functionality across the entire site? I shouldn't have to check roles on every page should I?
Is there a way to prevent access to pages regardless how the user tried to access the page?
Go to the complete details ...