Does cookie caching provide roles?

Question

Will caching the user role in the cookie be a security issue? Can they decrypt the cookie and change their role as Admin? What good is this?

Answer 1

Here is one good text:

How serious is this new ASP.NET security vulnerability and how can it be circumvented?

I personally would not store roles in cookies if there were no serious performance issue due to their receipt from the database. It all depends on you, security and performance. If you have a banking or health site, do not cache. If you have an e-commerce store, caching should not be an equally huge issue.

, - . , GetRoles System.Web.

Answer 2

, , .

asp.net , . , , - .

: cookie, . , , , . .