public ActionResult Login(LoginModel model, string returnUrl) { if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe)) { UserBusinessLayer ubl = new UserBusinessLayer(); UserProfile user = ubl.GetUserByUserName(model.UserName); System.Diagnostics.Debug.Write(ubl.GetUserStatus(user)); Session["Permission"] = ubl.GetUserStatus(user); return(RedirectToLocal(returnUrl)); } // If we got this far, something failed, redisplay form ModelState.AddModelError("", "The user name or password provided is incorrect."); return(View(model)); }