I have a list box in my ASP=2ENET web page=2E The list box is=
populated on page load event with names of the employees of a=
department=2E The department is decided depends on the login=2E But=
when a user from department "A" logs in, he is shocked to see=
employees of other department in his list box i=2Ee=2E other than A=2E=
He logs out and re logs the problem is solved he gets back his=
employees=2E This problem frequently occurs=2E What could be the=
problem ?
From: GSN Sarma

-----------------------
Posted by a user from =2ENET 247 (http://www=2Edotnet247=2Ecom/)

[quoted text, click to view]

I have a list box in my ASP.NET web page. The list box is populated on page
load event with names of the employees of a department. The department is
decided depends on the login. But when a user from department "A" logs in,
he is shocked to see employees of other department in his list box i.e.
other than A. He logs out and re logs the problem is solved he gets back his
employees. This problem frequently occurs.

[quoted text, click to view]

How are you evaluating who the current user is?

When users log in, are you storing information about them (userID,
department etc) in an unsafe way so that another user could overwrite the
details of an already logged-in user?