Roles.CookieProtectionValue Property

Definition

Namespace:

System.Web.Security

Assembly:

System.Web.dll

Gets a value that indicates how role names cached in a cookie are protected.

C#

public static System.Web.Security.CookieProtection CookieProtectionValue { get; }

Property Value

CookieProtection

One of the CookieProtection enumeration values indicating how role names that are cached in a cookie are protected. The default is All.

Examples

The following example shows the roleManager element in the system.web section of the Web.config file for an ASP.NET application. It specifies that the application uses a SqlRoleProvider instance and sets cookieProtection attribute to Encrypted.

<roleManager defaultProvider="SqlProvider"
  enabled="true"
  cacheRolesInCookie="true"
  cookieName=".ASPROLES"
  cookieTimeout="30"
  cookiePath="/MyApplication"
  cookieRequireSSL="false"
  cookieSlidingExpiration="true"
  cookieProtection="Encrypted" >
  <providers>
    <add
      name="SqlProvider"
      type="System.Web.Security.SqlRoleProvider"
      connectionStringName="SqlServices"
      applicationName="MyApplication" />
  </providers>
</roleManager>

Remarks

You can specify the protection of the cookie where roles are cached for your application by setting the cookieProtection attribute in the Web.config file for your ASP.NET application. The cookieProtection attribute takes a CookieProtection enumeration value that indicates whether the role names are encrypted, validated, both, or neither.

Applies to

See also

• Understanding ASP.NET Role Management