I modified the getpassword stored procedure to delete the user from a certain security role and created an iframe that forces the user to accept a user agreement which then adds that user back into that role.  The point of this was to force each user AFTER logging into DNN to accept a confidentiality agreement.  I've noticed that the Roles are stored in a session(I'm guessing) causing the user to not be able to access certain parts of the site except after a couple minutes.  Is there any easy way to invalidate the roles in the session and cause it to reload?   If not, any suggestions?

I realize that this isn't the best approach however I don't intend to upgrade nor do I have a lot of time.  I'm just looking for something quick right now.

Thanks.

Whilst this is an old post, I wanted to get the word out about a part of the DNN core API that helps with this job.

PortalSettings.ClearRoles(); can be used instead of the three lines affecting the portalroles cookie above (all three containing Response.Cookies["portalroles"] above).

This API method encapsulates some of the roles functionality; encapsulation is always good in case of changes being required to the implementation in future.

The code then becomes

   //Clear the user controller
   DataCache.RemoveCache(UserController.SettingsKey(PortalId));
   //Clear Roles Cache
   DataCache.RemoveCache("GetRoles");
   //Clear Role Cookies For Current User
   PortalSettings.ClearRoles();
   //Cause a page refresh to allow reloading of user's role memberships
   Response.Redirect(Globals.NavigateURL());

I'm not even sure that the first line is required; it may be just as good to use

DataCache.ClearUserCache(PortalId, UserInfo.Username);