Answer by  
                                                                                          worker5398 (20)
                                                            
                          
                          
                                                           my favorite approach is to pass the user's identity # after log-in. on log-in page
 context. items. add("UID", useridfromdb)
 where useridfromdb is the identity vale from the database
 then, on the page_load for each page i get the user's record #
 on pageload event:
 dim uid as string
 uid = context. items("UID")
 f uid = "" then
 server. transfer("~/notauthorized. aspx")