You have to do something like below in the dnn code, compile it and replace the dll.

Place a code line like below in AuthenticationController class:

UserController.AddUserRoles(_portalSettings.PortalId, objDNNUser)

Instead of:

                    ' Synchronize role membership if it's required in settings
                    If _config.SynchronizeRole Then
                        objAuthUser = objAuthUserController.GetUser(LoggedOnUserName)

                        ' user object might be in simple version in none active directory network
                        If Not objAuthUser.GUID.Length = 0 Then
                            objAuthUser.UserID = intUserId
                            UserController.AddUserRoles(_portalSettings.PortalId, objAuthUser)
                        End If
                    End If

Hope this would help you..

Regards,

Shantha.

hi mike,

As you said, If I am to extend the code to my requirment, do you know at which place I should do the change? and do you have any suggesions about the change required there ? ( get the user's role from DNN database and assign it at login)

thanks

Shalinda

Hi Dan,

Thanks for your help. I did not want to sync the AD roles with DNN roles. Yes I wanted to pull the logged in users DNN role at the point of login so that they will see all their intended pages.

I have a seperate windows service running which will update DNN user list with what ever changes in AD (add/edit/delete users from AD). I made this windows service to use the DNN Stored procedures (adduser/updateuser/deleteuser). So when the AD user list propogated to DNN user list,they will have registered users and subscribers roles assigned by default. Then DNN admin will will add them New DNN roles (custom roles) as and when required. So when the users loged in, they will see the pages restrcted to the assigned Roles.

Anyway i made few changes on authenticationLogon() method in authenticationController class to make the DNN portal work tha way I wanted. When validating user from the windows credentials ( in  authenticationLogon() method) username takes the following form - domainname\username. but in DNN DB username is stored as is.

 For example

windows credentials - tsaep\sfernando but in DNN DB its recorded as sfernando only.

So I wrote few codes to take the domainname part off from the loginusername and then it worked.

thanks for all your help guys..