Forms auth: User has been changed during session

Question

We are having a strange case.

User "A" logged into our web-system (ASP.NET MVC, Forms Auth), was working for some time, then his user name changed to "B" after "B" logged into the system.

That case is very critical — user can't see data of others.

Does anyone have any ideas? Please!

FINALLY:
We've decided it is a bug somewhere in ASP.NET, IIS or wherever more.

Answer 1

As you're pulling data from the User in the application?

If you are using a static variable to display the data of the User remove this variable as it is static because it is available to any User that accesses the webapp because it is stored on the server that the application

---

"Faça as coisas da forma mais simples possível. Mas não mais simples do que isto" - Albert Einstein