For the sake of completeness, have you tried copying the string "manager"
from your web.config file and doing a IsUserInRole to verify that "Bob" or
whatever is, indeed, in the role? Perhaps do a redirect if he is and just
verify that you have things configured properly.
http://msdn2.microsoft.com/en-us/library/system.web.security.roles.isuserinrole.aspxA
whole slew of weird things could be off somewhere.

Signature
~~~~~~~~~~~~~~~~~~~~~~~~~~
Ben Rush
Microsoft .NET Consultant
http://www.ben-rush.net/blog
http://www.sideshowsystems.com
> Hi,
>
[quoted text clipped - 30 lines]
> Thanks
> Chris
Chris - 19 Jun 2007 15:59 GMT
thanks, but it just found it:
<deny=..> must come after <allow ...>
..
> For the sake of completeness, have you tried copying the string "manager"
> from your web.config file and doing a IsUserInRole to verify that "Bob" or
[quoted text clipped - 37 lines]
>> Thanks
>> Chris