I've been storing things like user role, name etc.. in a session to pass each page and I notice the project i'm updating has been doing this by fetching the values from a SQL Server database on every pageload.
My Question is, which one is better practice to do this? On Session it's a bit annoying because I have to do many null checks unless i create a class to act as the user container and fetching data from SQL server every pageload seems like a big load on performance. Should I just keep doing it the session way? Seems more simple and more practical.
EDIT.
There's also this called membership in ASP.NET to store user role and set it on web.config but I haven't digged into it much