Hi Everyone,<BR><BR>Does anyone know when exactly the Sub Application_AuthenticateRequest in global.asax is fired? <BR><BR>I read it from somewhere that it is fired on every request to the web site. If this is the case, wouldn&#039;t Role based authorization be inefficient since you would have to re-create the GenericPrincipal on every request?<BR><BR>Thank you.<BR><BR>clok