The issue is because there is an entry for product.asp in
the site config dictionary for authorized pages. IF you
add your page entry in the same dictionary you should not
see the isse anymore.

HTH.

>-----Original Message-----
>I have built a page to display multiple products and to
allow ordering of those products from that page. It works
fine when the page is named product.asp however when the
page is renamed to storefront.asp or category.asp the
_additem.asp calls EnsureAccess and this fails because
initialially the page has not been reloaded with
cookie_test in the URL (at least that's what I think is
going on).
>
>This causes redirection to the badURL page. Using the
back button and trying to add to cart is always
successful.  When I use the same exact code on a  page
named product.asp this does not occur.
>
>I should mention that this site was built from the
retail site code.  Does commerce server look at the
orginating page and determine when or not to set or test
the cookie?
>
>Any help is greatly appreciated.  Thanks,
>--Geri
>.
>

[ Post a follow-up to this message ]