![]() ![]() If you set the preserveForm parameter to true, the target page will be able to access the view state of the previous page by using the PreviousPage property.įor security purposes, you should keep the enableViewStateMac attribute set to true. The page transferred to should be another. The following example executes a new page in the same directory as the current page. You can verify that the user has permission to view the resource by incorporating a custom authorization method that uses the IsInRole method before the application calls the Transfer method. Because this redirect is a new request entering the system, it is subjected to all the authentication and authorization logic of both Internet Information Services (IIS) and ASP.NET security policy. ![]() The Redirect method performs a client-side redirect in which the browser requests the new resource. You can force reauthorization by using the Redirect method instead of the Transfer method. If your application's security policy requires clients to have appropriate authorization to access the resource, the application should force reauthorization or provide a custom access-control mechanism. Although the ASP.NET authorization and authentication logic runs before the original resource handler is called, ASP.NET directly calls the handler indicated by the Transfer method and does not rerun authentication and authorization logic for the new resource. Transfer calls End, which throws a ThreadAbortException exception upon completion.ĪSP.NET does not verify that the current user is authorized to view the resource delivered by the Transfer method. The Transfer method preserves the QueryString and Form collections. The URL path of the new page on the server to execute. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |