First of all let me paint the picture.

We have an existing DNN website with lots of pages. When registered users login, a call is made to another database (a membership management application via a customized membership provider) to check if they are eligible to login.  They are then assigned to one of or both of 2 DNN security roles based on the result of this call.

The problem is, the membership application and customized provider has now changed. We can successfully add users to one or the other of the 2 roles but not both (Yeah, we could re-write the provider but there is only a small number of users who this applies to and it doesn't seem to be worth the effort). I thought of 2 possible ways around this but could not figure out how to do either. Any advise on how either could be achieved would be much appreciated, or another solution all together. (BTW we are using version 4.9.5. - Yeah we will get with the time sooner or later, probably later)

Idea 1. Add a new role called "Both" and have this assigned to the user at login - easy. But every page that is viewable to either of the other roles will need to be viewable to this role. Can you do a batch "update" of page permissions?

Idea 2. Some sort of role inheritance. eg. if a user is assigned the role "both" they inherit or are auto-assigned the other 2 roles, but only if they have the role both.

Thanks in advance.

Brad Purton