How do I set roles to a User through Global.asax?

The code I wrote above is based on there example.

Tried it and didn't execute.  Same for the Application_Start?

I want the roles to be set when they loggin or if the login is saved in the cookies, set the roles when they open the browser.

ok, it does fire the event, just tested

isinrole will return true,

but the webconfig does not accept it...

<location path="admin/welcome.aspx">
    <system.web>
        <authorization>
           <allow roles="1"/>
           <deny users="*"/>
        </authorization>
    </system.web>
</location>

                                              

1:
2:
3:
4:
5:
6:
7:
8:

--> but the webconfig does not accept it...
So whats happening?
Do you mean it lets everyone to access welcome.aspx?
try testing isInRole on welcome.aspx page load

no it does not let anyone go to welcome.aspx

isinrole works, but do i have to create a method to check roles now or is there a way to do this through the webconfig file?

-->>>>>>>>>isinrole works??
where did you check for isinrole ?

Do this...for troubleshooting...

<location path="admin/welcome.aspx">
    <system.web>
        <authorization>
                  <deny users="?"/>
        </authorization>
    </system.web>
</location>

Now on PageLoad of welcome.aspx check for

          Response.Write(User.IsInRole("1").ToString())

Tested,

No, it did not work.  I was using Response.Redirect in the Application_AuthenicateRequest Sub routine in global.asax and putting the User.IsInRole("1").ToString() in the url at the end of the code to see if IsInRole works, and it does return True.  (See code below to see what I am talking about)  

But when I tested from welcome.aspx like you suggested, it returns False

    Sub Application_Start(ByVal sender As Object, ByVal e As EventArgs)
        
        If Request.IsAuthenticated Then
            
            
            Using conn As SqlConnection = New SqlConnection(ConfigurationManager.ConnectionStrings("db").ConnectionString)
                
                Dim cmd As SqlCommand = New SqlCommand("sp_GetEmployeeAccess", conn)
                Dim reader As SqlDataReader
                
                cmd.CommandType = CommandType.StoredProcedure
                cmd.Parameters.AddWithValue("@Username", User.Identity.Name)
                
                Try
                    
                    conn.Open()
                    reader = cmd.ExecuteReader
                    
                    Dim roleList As New ArrayList
            
                    Do While reader.Read()
                        roleList.Add(reader("AccessID").ToString())
                    Loop
                    
                                
                    Dim roleListArray As String() = roleList.ToArray(GetType(String))
            
                    HttpContext.Current.User = New GenericPrincipal(User.Identity, roleListArray)
                    
                    reader.Close()
                    conn.Close()
                    
                Catch ex As Exception
                    Throw New Exception(ex.Message)
                Finally
                    cmd.Dispose()
                End Try
                
            End Using
        
            Response.Redirect("google.com?i=" & User.IsInRole("1").ToString())
           
        End If
        
    End Sub
                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:

did you set breakpoint at these lines and check if roles are added to Current User
set Breakpoint here:

--> Dim roleListArray As String() = roleList.ToArray(GetType(String))
           
-->HttpContext.Current.User = New GenericPrincipal(User.Identity, roleListArray)

Make sure roleList and roleListArray has proper roles....
     

set the suggested break points, array is good and has all correct role's.

I just noticed in your recent code....you have your code inside Application_start...
it should be inside Application_AuthenticateRequest
you don't need any code in Start ...

Also set breakpoint at following line:
cmd.Parameters.AddWithValue("@Username", User.Identity.Name)
and make sure User.Identity.Name is correct.

i removed it in start and is only in Application_AuthenicateRequest,

and yes, the correct user name is being passed.  

See the new code i posted to explain how i checked if things are being passed correctly

yes,

i have:

<roleManager enabled="true" cacheRolesInCookies="false" createPersistentCookie="false"></roleManager>

I think that was set by default, remove?

yes remove that....
If you have it enabled....it will use asp.net role provider instead and not what you are having in code.