Comments by GateKeeper22 (Top 18 by date)

Can you post code?

What do you mean by required validator? Do you mean the validator control to display the message or do you mean the data attribute to store the message in?

Need a lot more information. What grid you are using? Some example code would also help. If you could provide a little more information on what your problem is you will find that people are more willing to help.

Are you trying to access the value on client side or in the controller?

Can you post the code that is loading the Countries ViewData. I have a feeling that is probably where the problem is but have no way to verify it.

Can you post the code for the page and controller method where the value is null? It could be passing null for a bunch of different reasons. For example Name property on control is different than on the Model or the control on the form is not a input control.

I am not 100% sure on this but I believe that the username in the httpContext comes from the http request. I am not talking about the httpRequest object I am talking about the actual information sent a crossed the line. So no it wouldn't put it at the same vulnerability.

It is but all that shows is that the user is authenticated. I don't believe that the user name is stored in that cookie at all so you would still need to get the user name from HttpContext to check their roles with the Role Provider. The Role Provider always queries the database unless you have overridden it to check the session. If you are using HTTPS than it does make it more secure, the session is encrypted than. I would still avoid using the session to store any thing about Roles and Authentication as much as possible. Even with HTTPS users are still able to get the session and change values in it. Your database should be a lot more secure than your session. When dealing with sensitive information I always have it more secure even if it does cause a little of a performance hit. For a good article about this check out. http://msdn.microsoft.com/en-us/library/ff649487.aspx#pagguidelines0001_sessionmanagement.

I don't have any metrics for performance. They aren't asking about performance they are asking about how secure it is.

For the article you suggest isn't all of that information stored in a SQL DB and not in the Session state? Correct me if I am wrong. That is how it has always been set up when I have used the Role provider.

Which web grid are you using? MVCContrib, Telerik MVC extension, etc... Also what language are you using C# or vb.net?

I am using the MVC extension Grid not the AJAX grid. Looked at the javascript and can't really see how they are resizing the columns in that.

Don't know if this is a typo or not so I will ask. Are the 2 crystal report imports really using's in the code?