Home/ Questions/Q 8410919
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T00:18:18+00:00

So far I’ve seen several custom implementations of ASP.NET Role Providers, and all of

  • 0

So far I’ve seen several custom implementations of ASP.NET Role Providers, and all of them comply to a base class requirenment that the Role-checking is done based on string username. (For example IsUserInRole(string username)). Is this requirenment for Role Provider based on the fact that this string username will be a uniqe key for user entity?

My user class uses GUID Id as a uniqe identifier of the user instance.

P.S. I do understand that I need to use thie GUID Id when setting authentication cookies. Just want to make sure that I understand the motivation behind user name role associations.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Most likely because it’s very easy to get the username from the IPrincipal. So you can easily do IsUserInRole(User.Identity.Name)

    More importantly, the FormsAuthentication system has to be able to rely on the IPrincipal to do validation at the Authorization level, and the only information that available is the username.

    • 0