Private Sub PopulateSession(ByVal gUserID As Guid)
        Dim oUser As New DashboardDataObject.User(GetConnection())

        Session("UserID") = gUserID
        Session("BrandingPath") = oUser.GetBrandingPath(gUserID)
        Session("DashboardCustomerID") = oUser.GetCustomerID(gUserID)


    End Sub

mydatagrid.datasource =  oUser.GetListofSomethingByUser(Session("UserID"))

quote:

---

Originally posted by MichaelP

I vote session!

What I usually do is when the user clicks the login button and they are authenticated, I call a PopulateSession() method, and then FormsAuthentication.RedirectFromLoginPage after that.

I usually pass some sort of UserID (Primary Key from Users table) into the PopulateSession method. In that method, I call functions that would give me the info you noted above, and then write that data to session, like this:

Private Sub PopulateSession(ByVal gUserID As Guid)
        Dim oUser As New DashboardDataObject.User(GetConnection())

        Session("UserID") = gUserID
        Session("BrandingPath") = oUser.GetBrandingPath(gUserID)
        Session("DashboardCustomerID") = oUser.GetCustomerID(gUserID)


    End Sub

In the rest of your app, you get the data like so:

mydatagrid.datasource =  oUser.GetListofSomethingByUser(Session("UserID"))

Michael

<Yoda>Use the Search page you must. Find the answer you will.</Yoda>

---

quote:

---

Originally posted by MichaelP

I vote session!

What I usually do is when the user clicks the login button and they are authenticated, I call a PopulateSession() method, and then FormsAuthentication.RedirectFromLoginPage after that.

I usually pass some sort of UserID (Primary Key from Users table) into the PopulateSession method. In that method, I call functions that would give me the info you noted above, and then write that data to session, like this:

Private Sub PopulateSession(ByVal gUserID As Guid)
        Dim oUser As New DashboardDataObject.User(GetConnection())

        Session("UserID") = gUserID
        Session("BrandingPath") = oUser.GetBrandingPath(gUserID)
        Session("DashboardCustomerID") = oUser.GetCustomerID(gUserID)


    End Sub

In the rest of your app, you get the data like so:

mydatagrid.datasource =  oUser.GetListofSomethingByUser(Session("UserID"))

Michael

<Yoda>Use the Search page you must. Find the answer you will.</Yoda>

---

Session("UserID") = rs("UserID")
Session("ClientID") = rs("ClientID")
Session("UserName") = rs("UserName")

quote:

---

Since this is all data from the same table, could I just return a record from a sproc that simply did this:....

---

<script runat="server">

    Sub Page_Load

    End Sub
    
    Sub Button_Click( s As Object, e As EventArgs )
       Dim lngID as Long
       
       lblMessage.Text = ""
       If IsValid Then
         lngID = DBAuthenticate( txtUsername.Text, txtPassword.Text)
         If lngID > 0 Then
           'good employee
           'next we call a function to store some session info
           SetSessionData(lngID)
           FormsAuthentication.RedirectFromLoginPage( txtUsername.Text, chkRemember.Checked )
         End If
       End If
    End Sub
    
      Function SetSessionData(lngID as Long)
		Dim conMyData As SqlConnection
		Dim cmdSelect As SqlCommand
		Dim dtrLoginData As SqlDataReader
		
		'try and make a connection   
		Try
		       conMyData = New SqlConnection( ConfigurationSettings.AppSettings("strConn") )
		       cmdSelect = New SqlCommand( "select_user_session_data", conMyData )
		       cmdSelect.CommandType = CommandType.StoredProcedure
		       cmdSelect.Parameters.Add( "@LoginID", SqlDbType.BigInt ).Value = lngID
		       
		       conMyData.Open()
		       dtrLoginData = cmdSelect.ExecuteReader()
	      	
		       'assign session data
		       Session("LoginID") = dtrLoginData("LoginID")
		       Session("Login") = dtrLoginData("Login")
		       Session("ClientID") = dtrLoginData("ClientID")
		       Session("Client") = dtrLoginData("Client")
	       
       		'catch any exceptions that might be thrown
		Catch e as Exception
			Response.Write("An Error Occurred: " & e.toString())
		'clean up and close resources	
		Finally
			conMyData.Close()
		End Try	
    End Function
        
    Function DBAuthenticate( strUsername As String, strPassword As String ) As Integer
       Dim conMyData As SqlConnection
       Dim cmdSelect As SqlCommand
       Dim parmReturnValue As SqlParameter
       Dim intResult As Integer
    
	'try and make a connection   
	Try
	       conMyData = New SqlConnection( ConfigurationSettings.AppSettings("strConn") )
	       cmdSelect = New SqlCommand( "DBAuthenticate", conMyData )
	       cmdSelect.CommandType = CommandType.StoredProcedure
	       parmReturnValue = cmdSelect.Parameters.Add( "RETURN_VALUE", SqlDbType.Int )
	       parmReturnValue.Direction = ParameterDirection.ReturnValue
	       cmdSelect.Parameters.Add( "@username", strUsername )
	       cmdSelect.Parameters.Add( "@password", strPassword )
	       conMyData.Open()
	       cmdSelect.ExecuteNonQuery()
	       intResult = cmdSelect.Parameters( "RETURN_VALUE" ).Value
       	'catch any exceptions that might be thrown
	Catch e as Exception
		Response.Write("An Error Occurred: " & e.toString())
	'clean up and close resources
	Finally
		conMyData.Close()
	End Try
			
       If intResult < 0 Then
         If intResult = -1 Then
           lblMessage.Text = "Username Not Registered!"
         Else
           lblMessage.Text = "Invalid Password!"
         End If
       End If
       Return intResult
    End Function

</script>

<%@ Import Namespace="System.Web.Security " %>

<html>

  <script language="VB" runat=server>
    Sub Page_Load(Src As Object, E As EventArgs)
        Welcome.Text = "Hello, " + User.Identity.Name + " you have logged in at: " + DateTime.Now() 
	UserID.Text = Session("LoginID")
	UserName.Text = Session("Login")
	ClientID.Text = Session("ClientID")
	Client.Text = Session("Client")
    End Sub

    Sub Signout_Click(Src As Object, E As EventArgs)
        FormsAuthentication.SignOut()
        Response.Redirect("login.aspx")
    End Sub
  </script>

  <body>


    <form runat=server>

      <font face="Arial, Helvetica, sans-serif" size="2"><asp:label id="Welcome" runat=server/></font><p>
      <asp:label id="UserID" runat=server/><p>
      <asp:label id="UserName" runat=server/><p>
      <asp:label id="ClientID" runat=server/><p>
      <asp:label id="Client" runat=server/><p>
      <asp:button text="Signout" OnClick="Signout_Click" runat=server/></p>

    </form>

  </body>

</html>