On 11/1/07, Paul Cowan <[EMAIL PROTECTED]> wrote:
> The behaviour I want is for the second tab to require authentication but I 
> guess the session and the cookie are shared across all tabs in the browser.

Yep.

> Is there anyway to set the formsauthentication config to require 
> authentication on each tab?  It works cookieless but this is not the 
> behaviour I want.

Only by storing the authentication ticket somewhere other than a
cookie. There are two other options:

1. In a hidden form input (which would mean requiring every
interaction with the server to be a post). Some online banking systems
do this.

2. In the query string - which is the behaviour of the cookieless setting.

There's no-where else to store this. Cookies,QueryString and Form's
are your three options.

j.

===================================
This list is hosted by DevelopMentorĀ®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com

Reply via email to