If this is a web project use Session state to record the user's role. Then whenever access to a restricted page is required check the session variable to see if access is allowed.
When the admin or manager log in set the session based on their role:
Session["role"] = "admin"; // C#
Session("role") = "admin // VB.net
or maybe you will enumerate and have numbers that specify the role, its up to you.
Then you can check it with things like:
If(!Session["role"].ToString() == "admin") {
// redirect away from admin page
}
hericles
Veteran Poster
1,065 posts since Nov 2007
Reputation Points: 156
Solved Threads: 228
Skill Endorsements: 10