1)

a) I assume roles are cached ( by setting Roles.CacheRolesInCookie ) only for current user?

b) Besides Roles.GetRolesForUser(_currentUser), are there any other methods that will read role information for current user from role cookie and thus won’t have to connect to the data base?

2)

a) I assume that normally role cookie gets updated only when current user is added or removed from the role(s) or when the cookie expires?

b)

Because role names can be cached apart from the data source, it is possible that changes to role management at the data source would not be reflected in the cached values. In this case, the user must close and re-open their browser to clear the cached cookie value.

How exactly could role cookie get cached apart from the data source?

3) If the number of roles cached in a role cookie equals the value of Roles.MaxCachedResults, then I assume when Roles.GetRolesForUser (_currentuser) gets called, it will need to check the DB to see whether user is also a member of any additional roles?

thanx