The problem I'm having is that the method GetPermission is returning the same action as the previously logged on user. Specifically, I have the menu item "Manage Security Options". I only want this menu item enabled if the user is assigned an Administrative role.

This works fine if I initially login with a user that doesn't have admin role assigned (the menu is disabled). However, if I initially login as admin, logout (using the session object), then log back in (as non admin user), the menu item remains enabled.

Stepping through the code indicates GetPermission is returning Grant for the new user, despite the user isn't assigned the admin role.

BTW...thanks for setting up the forum!