<div>
Do you want to assign role to each user everytime they login or first time they login?<br />
Or when you create the account?<br />
<br />
Two thing you have to do:<br />
1: Setup your application to use role provider. This can be done by enabling roleManager and approriate settings for roleprovider in your web.config<br />
2: Use the Role Provider APIs to add user to role/Remove user from a role etc.<br />
<br />
The link below is almost what you are looking for. The only difference is it is using Windows Authentication and you will be using your own authentication. Roles concept remains identical.<br />
Check: <br />
<a href="http://weblogs.asp.net/scottgu/pages/Recipe_3A00_-Implementing-Role_2D00_Based-Security-with-ASP.NET-2.0-using-Windows-Authentication-and-SQL-Server.aspx" rel="ugc">http://weblogs.asp.net/scottgu/pages/Recipe_3A00_-Implementing-Role_2D00_Based-Security-with-ASP.NET-2.0-using-Windows-Authentication-and-SQL-Server.aspx</a><br />
<br />
Also check the tutorials here under Roles section on how to create/assign/manage roles through code i.e. using Roles API.<br />
<a href="http://www.asp.net/learn/security/" rel="ugc">http://www.asp.net/learn/security/</a><br />
<a href="http://msdn.microsoft.com/en-us/library/ms998314.aspx" rel="ugc nofollow">http://msdn.microsoft.com/en-us/library/ms998314.aspx</a>
</div>


<div>
ok, I will take a look at those sites this afternoon; they might be the answer: &nbsp;<br />
<br />
To answer your question: &nbsp;I have around 300 users, who will use their employee ID to log in. &nbsp;The login page authenticates the user via a web service that my IT group administers. &nbsp;Once they are authenticated, they need to only access specific folders (thus my need for roles.) &nbsp;So, once John Doe logs in with his employee id (12345) I have a table that says id 12345 belongs to the &quot;Sales&quot; and &quot;Marketing&quot; roles. &nbsp;Not sure if this changes your suggestion, but just wanted to make sure I was clear on my issue. &nbsp;Thanks.<br />

</div>


<div>
<blockquote>
<i><b>So, once John Doe logs in with his employee id (12345) I have a table that says id 12345 belongs to the &quot;Sales&quot; and &quot;Marketing&quot; roles.</b></i> <br />

</blockquote>
How did you create user/roles mapping in the table? Is this the table that comes with aspnet membership/roles database or your custom table?<br />
If it is aspnet roles tables ... you should create roles and add users to those roles using roles api to work it properly<br />
If you have your custom table for roles ...then the default sqlroleprovider will not work for you. <br />

</div>


<div>
The user/roles mapping is a custom table right now, but I could start using the [aspnet_UsersInRoles] table if it makes the task easier. &nbsp;But I would need help with the mechanics. &nbsp;For instance, once a user is authenticated do I need to set a specific session variable with the employee ID?
</div>


<div>
Using aspnet Roles tables will make your job easy.<br />
If you are using Forms Authentication then it will get the info of current logged-in username from the httpcontex.current.identit<wbr />y.Name and do the work for you.<br />
If not then I think then the code might become complex.<br />
<br />
So how is your current authentication mechanism working?<br />

</div>


<div>
Right now, there is no role security. &nbsp;Once the user is authenticated, they have acces to the whole site. &nbsp;I use Forms Authentication. &nbsp;The user types their id and password, I send the values to a webservice that returns true or false. &nbsp;<br />
<br />
So, based on what you suggested. &nbsp;Once the webservice returns true (meaning the user is authenticated) should I set the httpcontex.current.identit<wbr />y.Name = employee id? &nbsp;Then it would look for the employee id in the role table and assign the correct role, right?
</div>


<div>
Thanks for your help, your guidance was very clear and worked perfectly. &nbsp;My forms authentication was set-up how you described , so implementing the roles portion was easy. &nbsp;Thanks again. &nbsp;
</div>


<div>
<div class="content wysiwyg-content">
I have an ASP.NET application (in C#.) &nbsp;I have a custom login authentication procedure. &nbsp;Once a user is authenticated I want to take advantage of the asp.net roles. &nbsp;Can I integrate the asp.net roles feature into my existing authentication procedure? &nbsp;And if so, how would I do this? &nbsp;Just to let you know where I stand, my DB is already set up for asp.net security and I have already created all of the roles I want to use. &nbsp;So, when I authenticate my user I need to assign a role(s) to them... which I where I need help. &nbsp;Thanks in advance, Christopher
</div>
</div>


I have an ASP.NET application (in C#.)  I have a custom login authentication procedure.  Once a user is authenticated I want to take advantage of the asp.net roles.  Can I integrate the asp.net roles feature into my existing authentication procedure?  And if so, how would I do this?  Just to let you know where I stand, my DB is already set up for asp.net security and I have already created all of the roles I want to use.  So, when I authenticate my user I need to assign a role(s) to them... which I where I need help.  Thanks in advance, Christopher

Implement Roles in

The successor to Active Server Pages, ASP.NET websites utilize the .NET framework to produce dynamic, data and content-driven web applications and services. ASP.NET code can be written using any .NET supported language. As of 2009, ASP.NET can also apply the Model-View-Controller (MVC) pattern to web applications

ASP.NET

Web applications are systems that run in browsers that perform functions normally associated with other client-based programs. One of the most commonly used web applications is email; instead of downloading individual emails to a local machine, the data is shown through a website. Other examples of web applications are collaborative systems like a wiki or an online game.