It's been quite some time since this tread has been posted. I found no resolution and looks like the issue still exists in DNN 4.0.2 (haven't tested with 4.0.3 yet) - If this is still an Issue and Noone's been able to spend time on this side yet - I would like to go ahead and fix this and send out the fix to all involved. If a solution has been already posted by someone it'll be great if we can have a link posted on this board as a resolution.

Thanks much,
rajiv.

I am using DNN 3.2 as well and must have synchronization work both ways (adding and removing rolls).  I have a temporary quick fix that works for me.  I use a simple SQL statement to clear out all roles for the authenticated user before the AddUserRoles function is called.  This way the roles should always be up to date when the user logs on.  I need to figure out how to adjust the timeout on the authentication cookie to 5 minutes though... anybody can help me out on that one?

paste after line 84 in components/Authentication/AuthenticationController.vb

...

objAuthUser.UserID = intUserId

' 06/14/06 WE350Z - AD Synch fix
' remove existing user roles from db fix for currently authenticated users, except admin role if present
Dim myDataSet As DataSet
'Dim myDataTable As DataTable
Dim mySqlDataAdapter As SqlDataAdapter
Dim strSQL As String
Dim strConn As String
strConn = System.Configuration.ConfigurationSettings.AppSettings("SiteSqlServer")
strSQL = "DELETE FROM UserRoles WHERE UserID = " + intUserId.ToString() + " AND RoleID != 0"
myDataSet = New DataSet
mySqlDataAdapter = New SqlDataAdapter(strSQL, strConn)
mySqlDataAdapter.Fill(myDataSet, "UserRoles")
' end fix

UserController.AddUserRoles(_portalSettings.PortalId, objAuthUser)

...