Hi,

I have successfully setup a security role that allows access to secure areas of the web site. In addition, I have setup the payment gateway with PayPal and have setup an IPN (Instant Payment Notification) to return to paypalipn.aspx. I have a subscription model of £25 / month with a 14 day free trial.

SO far, so good, the payment is taken OK by Paypal the emails from Payapal are sent out and the user returns to the web site. It appears that they have importantly acquired membership to the subscription role. The big problem, is that the user seems to have to logooff and log back on again for these security access rights to take affect.

The current result is the user starts to panic as they think they have paid and not got access, so they immediately unusbscribe and unregister. -->> Lost Business

How can I make it so that on returning from PayPal they adopt the security rights of the their new role ???? without having to logoff and log back again.

OK, this has got me thinking again. I was blindfolded into thinking it was something wrong with the PayPal Subscription and never thought about the roles and caching / cookies.

By doing a simple test, of altering a users roles manually, I see that the roles caching/ cookies is the problem.

Now to try and solve it, using your advise to look at web.config, I changed the cacheRolesInCookie from true to false.

<roleManager cacheRolesInCookie="false" cookieName=".ASPXROLES" cookieTimeout="30" cookiePath="/" cookieRequireSSL="false" cookieSlidingExpiration="true" createPersistentCookie="false" cookieProtection="All"> 

Unfortunately, it didn't work straight off, I am now waiting 30 minutes to see if expiration of any existing cookies might be a problem.

One step further, but not there yet.