When a user registers on my portal, they are initially setup in a "Free Trial" role.  One of the few pages that the Trial role has access to is a Purchase Account screen.  From this screen the user may purchase one of several account types (Personal, Academic, Corporate).  I have a role setup that corresponds to each of these account types, and these roles have permissions to other pages such as a Receipts page, which the Trial role cannot access.

On click of the submit button on the Purchase Account screen I am removing the user from the Trial role using the DotNetNuke.Security.Roles.RoleController.DeleteUserRole() function, and adding the user to their new role (which has access to the Receipts module) using the Security.Roles.RoleController.AddUserRole() function.  I am then redirecting the user to the Receipts page by doing:
Dim tabs As New Entities.Tabs.TabController
Response.Redirect(NavigateURL(tabs.GetTabByName("My Receipts", PortalId).TabID))

Both the aspnet_UsersInRoles and the UserRoles table seem to update correctly. However, when the Receipts page is loaded it says that I don't have access to that page.  I have found though, that if I wait for about a minute and then refresh, the page loads up fine.  Takes a minute though; before that time refreshing gives the same error message.

Does it cache the user's role and only periodically update it?  How can I force it to update this information so that the Receipts page will see the newly added role when I redirect to it?  Any help would be greatly appreciated.

here is the code (C#) that I use to reset the user's roles before i redirect them.  this seems to work pretty good.  I horked and converted it from the membership provider (if i remember right).

DataCache.ClearPortalCache(PortalId, true);

//This roles cookie stuff enables the features of a subscription right away.

//Rewrite the roles cookie...

string[] arrPortalRoles = rc.GetPortalRolesByUser(ActiveUserId, PortalSettings.PortalId);

// create a string to persist the roles

string strPortalRoles = string.Join(";",arrPortalRoles);

//create a cookie authentication ticket ( version, user name, issue time, expires every hour, don't persist cookie, roles )

System.Web.Security.FormsAuthenticationTicket RolesTicket =

new System.Web.Security.FormsAuthenticationTicket(1, objUserInfo.Username, DateTime.Now, DateTime.Now.AddHours(1), false, strPortalRoles);

// encrypt the ticket

string strRoles = System.Web.Security.FormsAuthentication.Encrypt(RolesTicket);

// send roles cookie to client

Response.Cookies["portalroles"].Value = strRoles;

Response.Cookies["portalroles"].Path = "/";

Response.Cookies["portalroles"].Expires = DateTime.Now.AddMinutes(1);

---

Jeff Martin
MCSD C#

Glad I could help.

 

---

Jeff Martin
MCSD C#