We have a web application with access to Business logic and data access in separate projects.
The way it is designed, key values is never passed to data access layer or business logic. Instead business layer has a class which contains public read only property through which DAL layer access the values.
Business logic layer is in a different project. Web project gets the reference.
Business logic layer has this class : Public NotInheritable Class clsUserProfile
Which has this property:
Public ReadOnly Property AgencyCode() As Integer
If (HttpContext.Current.Session(_AgencyCodeKey) Is Nothing) Then
Will the data will be overwritten when multiple users login.
Many people say that it is not advisable, but cannot find any provable reason as to why it is not recommended?
If anybody can give clear reasons that would be great.