I am handling this event to change some UI elements based on SecurityBasics.CurrentUser object. For example, changing the text on the status bar to show the currently logged on user. This works fine.

The problem I'm having is that the method GetPermission is returning the same action as the previously logged on user. Specifically, I have the menu item "Manage Security Options". I only want this menu item enabled if the user is assigned an Administrative role.

This works fine if I initially login with a user that doesn't have admin role assigned (the menu is disabled). However, if I initially login as admin, logout (using the session object), then log back in (as non admin user), the menu item remains enabled.

Stepping through the code indicates GetPermission is returning Grant for the new user, despite the user isn't assigned the admin role.

BTW...thanks for setting up the forum!

I was looking through the user changing code, and as far as I can tell, nothing is being saved from one user to the next... on your user without admin privilages, is the permission you are querying for the menu item denied to the user or not assigned to the user?  If it is explicitly denied, then I'll need to try and reproduce your scenario, but if it is just not assigned to the user, then the default permission (assigned through SecurityBasics.DefaultPermissionInfo property) should be returned.  So, if your default permission is Granted, then I'll need to look at why the menu option is initially disabled.

Uhhg!!

I am really sorry. I have been working non-stop trying to get this project out the door and forgot that I had setup another user.

With all that you guys are doing, the last thing you need is a goose chase. Again, sorry for the misdirection.

More coffee...that's what I need...

Hehe, not a problem   I do that to myself quite often... I have several security projects going at the same time, and rather than deploying the data each time I want to debug, I just point my SecurityDataSourceKey to the StrataFrame database and use the development data... but the runtime has no notion of "security projects" so they all get mixed together and sometimes I don't realize that I have two users with the same username in two different projects and it grabs the wrong one