Answer by
worker5398 (20)
my favorite approach is to pass the user's identity # after log-in. on log-in page
context. items. add("UID", useridfromdb)
where useridfromdb is the identity vale from the database
then, on the page_load for each page i get the user's record #
on pageload event:
dim uid as string
uid = context. items("UID")
f uid = "" then
server. transfer("~/notauthorized. aspx")