I'm working on a web app that uses the same RBS as a windows app I'm also working on.  The web login seems to work fine using SetLoggedInUser() and the CurrentUser is then set to what I would expect.  When I use CurrentUser.GetPermission(), it always returns PermissionAction.Grant.  This happens if the user was granted the specified permission, the specified premission is denied or the specified premission doesn't even exist.  I have IsWebEnvironment=true and DefaultPermissionAction set to Deny in Global.asax.  This is working fine for me in the windows app.  Any ideas what I'm doing wrong on the web side?  Thanks!