Invalidate another users session variables

Question

I'm thinking of a situation where an administrator makes some changes to another user in the system that happens to be logged in. Is there any programatic way to invalidate that specific users session variables and force them to be repopulated?

Use Case

1. Admin Edits Bobs preferences
2. Business Logic clears bobs preferences stored in session
3. Preferences saved to database

Thanks

Answer 1

One way is to clear the other user's session cookie.

The other way is to create your own SessionIDManager (derive from the built-in one). Then when the Validate method is called with the other user's session ID, you can return false.