Try it out code (p644)

jmahdi · May 11th, 2011, 04:48 AM

Hi there,
I couldn't understand the use of this code in the try it out -step 7:

Code:

 if (User.Identity.Name != photoAlbumOwner && !User.IsInRole("Managers"))
            {
                Response.Redirect("~/");
            }

from what i understand, if you are not logged in generally you cannot get to this page anyways!... secondly does response.redirect bounce the unauthorised user to the home page?? thanks

Imar · May 11th, 2011, 04:53 AM

Hi there,

Quote:

if you are not logged in generally you cannot get to this page anyways!...

That's correct. But this code does more: it also redirects the user away when he's not the owner of the album, and not a manager. This way, you can't edit someone else's album.

Quote:

secondly does response.redirect bounce the unauthorised user to the home page??

The Response.Redirect you posted sends users that are not the owner of the album and not a manager to the homepage.
The default behavior of ASP.NET for unauthenticated users hitting this page is to send them to the configured login page which is ~/Login.aspx by default.

Cheers,

Imar

jmahdi · May 11th, 2011, 05:09 AM

thanks a bunch