What's the best technique to hide part of a view depending of the credentials of the user?
To explain my self little better and as example i have the following code in my view:
<%= this.Model.Name %> <%=Html.ActionLink("Edit",....)%>
And i would like to hide the edit button for those that aren't administrators for instance...
Could you give me a hand?
I am using ASP.NET MVC 3. We assign roles to certain people at work, then we use Windows authentication to determine what roles a user has. Lets say the roles are RoleA, RoleB and RoleC. So now I get a list of roles for a user. Lets says that UserA belongs to RoleA and RoleB. Some of my views need to be authenticated as not everyone can view certain views. Lets say that ViewA can only be viewed by users that belong to roles RoleA and RoleB. How would I do this? What would I need to look into? When a user that does not belong to these roles tries to access the views then he/she should be redirected to an error page.
View 1 RepliesI have looked all over for elegant solutions to this not so age-old question. How can I lock down form elements within an ASP.Net MVC View, without adding if...then logic all over the place? Ideally the BaseController, either from OnAuthorization, or OnResultExecultion, would check the rendering form elements and hide/not render them based on role and scope. Another approach I have considered is writing some sort of custom attributes, so as to stay consistent with how how we lock down ActionResults with [Authorize]. Is this even possible without passing a list of hidden objects to the view and putting if's all over? Other background info: We will have a database that will tell us at execution time (based on user role/scope) what elements will be hidden. We are using MVC3 with Razor Viewengine. We're utilizing a BaseController where any of the Controller methods can be overridden.
View 1 RepliesI have LOGIN PANEL for student, and I want to disable it in different page. And only the admin can enable and disable it. I dont know the logic behind here.
View 1 RepliesIn a standard, generated list view, how can I hide certain ActionLinks based on the roles the logged in user belongs to?
View 1 Replieshow to hide a repeater column based on the user privileges.
Say I have:
<asp:Repeater ID="repeater" runat="server>
<HeaderTemplate>
<table id="table_id">
<tr>
<th>Name</th>
<th>Secret Info</th>
<tr>
</HeaderTemplate>
<ItemTemplate>
<tr>
<td><asp:Label ID="Label1" runat="server" Text='<%# Eval("Name") %>' /></td>
<td><asp:Label ID="Label1" runat="server" Text='<%# Eval("SecretInfo") %>' /></td>
<tr>
<ItemTemplate>
<AlternatingItemTemplate>
<tr>
<td><asp:Label ID="Label1" runat="server" Text='<%# Eval("Name") %>' /></td>
<td><asp:Label ID="Label1" runat="server" Text='<%# Eval("SecretInfo") %>' /></td>
<tr>
<AlternatingItemTemplate>
<FooterTemplate>
</table>
</FooterTemplate>
</asp:Repeater>
How would I only display the 'Secret Info' column to logged on users?
Well I have a web page asp.net(page1.aspx) amm user can choose two options A/B if user chooses a when he is in page2.aspx i want a javascript was execute
function(receive parameter)
{
}
But if he chose option B function never will be executed. I want to do, if user chooses A will see a asp button, but if he choose option b he is not going to be the button
I am binding a treeview with XmlDataSource. On my login page I want to hide some node like
see my login code
if (Session["uname"] != null)
{
if ((Session["uname"]).ToString() != "")
{
if ((Session["UserType"]).ToString() == "Administrator")
{ dont hide nodes }
else { hide some nodes}
}
else
{
Response.Redirect("index.aspx");
Session["uname"] = "";
}
}
else
{
Response.Redirect("index.aspx");
Session["uname"] = "";
}
}
so how to do that, if you need my .aspx code for treeview so free to ask.
I am looking at a design pattern which has come up in quite a few of my firm's projects.It has historically functioned correctly, however I have heard some other developers argue that there is a possibility of session corruption using this pattern. I'm looking for insight from other .NET developers here on Stack Overflow. Basically, there's a class -- usually either static or a Singleton pattern, depending largely on the developer who wrote it -- stored in App_Code.This class encapsulates access to the current session via properties.All of these properties take the form of:
[code]...
However,because this is just a static entry to HttpContext.Current.Session,it seems like it should be safe, as it is not fundamentally any different than the Page class encapsulating this in the Session property.As I said,no other site on which my company has worked that used this pattern saw it ever have any issues -- and that includes some pretty large and highly active userbases.But I want to just get a fresh perspective.
Are there potential multi-user issues, race conditions, or other failings/flaws which specifically could cause session corruption in the above pattern?
i have my own DLL (for the data access layer),,i use escaping characters technique to avoid the user input errors ,, but recently i decided to enhance my classes and using parametrized query to prevent all possible errors,Is the modification will be easy or difficult ??how to convert this way to use the parametrized query ..
View 1 RepliesI want to know that how to render partial view based on where the user navigates. I mean to say if user navigates to Home/index it will load different partial view and if user navigates to Home/contact it will load different partial view on the _layout page.
View 1 RepliesI have an (unordered)list (generated by a repeater) of items. However, I'd like to show the first three items, and have the rest hidden by the main content div. When a button is pressed, I would like the list's div to expand, pushing the main content div down and showing the rest of the list. I was thinking of using slideDown(), but that closes the entire div ( and I would like to show the first 3 items of the list). What would be the best way to achieve an effect like this? Is there a plugin that can easily show X items of a list and the display the rest upon request?edit: Adding current code:
<div id="name_links">
<asp:Repeater ID="rptName" runat="server">
<ItemTemplate>
[code]...
I want to execute some logic if the Logged in User can view a page "~/MyPage.aspx". IF the logged in user should be elligible to view the page is determined by the role based security I configured in the web.config file. There are many methods to find out if the user is in role XXX or not. But I did not find any method to find out if the user can view a page or not ahead of transferring the user to that page. Maybe I will hide a link to a specific page to the logged in user if the user is not elligible to view that page if I know the technique i am asking here to know.
View 1 Replieshave a web in which there are different areas i have a 1 admin which manage all things like news, Events, Notices, Logs, Forums, Publications etc.........i want assign user rights that select user view only Noticesselect user view only Logsselect user view only Newsetc....
View 7 Repliesi need to do something like this :
i have a partial view and i can go to it like this :
/home/GetMovies?partial=true
this return a STRING with a movie inside
some times i want to return this string inside other view
(lets say i want to put the string movie thing inside full html view and not just the movie string )
so im doing it like this:
/home/GetMovies?partial=false
how the seriver side should look like ?
Can I use LINQ to SQL and have a user log in, and with that login be restricted to certain parts of the database.. basically having access to information located under their particular customer ID number.... how would I get the 'session' to follow them throughout the website without having to login each time the database is tapped for info...?
View 1 RepliesI have a website with the below structure for saving product images:
~/fileserver/{user_id}/{file_id}.{file_extension}
I want to restrict access to each {user_id} folder and let only the specific user to retrieve that image. How this can be done? Do I have to set something in IIS?
i am able to deploy the SRS Reports locally without any issue. but the probelm when i try to access in the website its gives the error as "The permissions granted to user 'XXXASPNET' are insufficient for performing this operation. (rsAccessDenied)"So Please any one of you let me know what needs to be done in the configuration setting for the problem to get resolved.
View 1 RepliesI wrote an asp.net application that I'm trying to run on a godaddy domain I bought. I need to read a file in a folder that I did not give read access to so that your average user cannot see in the informaion in that folder. I assumed that the asp.net program would have the same credentials as myself because server-side code. Turns out I am wrong. When I go to use the asp.net application it throws an access denied error saying that the ASP.NET user account has to be given permissions to access the folder.
After talking to two different tech support people at godaddy I've come to the realization that they are either dumb or lazy (or a combo of the two).I came across some code that you can put into the web.config file that would allow the asp.net application to impersonate a user, which would work great to use myself as the impersonated user. However it seems that godaddy cannot give me the name of the server that my domain is on (that's understandable) so I don't know what to put in the identity tag to get this to work.
Here is the code I found:
[Code]....
(of course I filled in the username and password with the correct info)
When I went to use it again it threw this error:
System.Web.HttpException: The current identity (PHX3username) does not have write access to 'C:WindowsMicrosoft.NETFrameworkv2.0.50727Temporary ASP.NET Files'.
I have added a jquery datepicker on my MVC view. This view has a partial view. I need to filter my partial view based on the datepicker's selected date. I need to show buttons on partial view based on the date.
I have added partial view like this:
div id="dvGames" class="cornerdate1"> % Html.RenderPartial("Partial3"); %>
/div>
How Can I Pass data(not the part of model) to Controller from View? View Code
[Code]....
I need to hide a button on the view based on if TempData["SearchResults"] exists how can i accomplish this.
I have a search page and details page.
When i get the search results as list of rows in a table i click on the row to view the detials of the search result which gets displayed on another view , at tht instance i set the TempData["SearchResults"] with values which i need to repopulate when i navigate bck from detail page.
I need to hide back to search button on details page based on if( TempData["SearchResults"] exists something like if TempData["SearchResults"] == Null then Hide back button). How can i do this?
I have a view that displays all the records of my Roles table. I want to be able to click a Role record and have a list of users that pertain to that role displayed to the right of the Roles list. I'm sure I need to use a view model for this so I can get two sets of models in one view, but I'm not sure how to set up the view model.
Controller code:
[Code]....
Repository (userRep) code:
[Code]....
I can just as easily get the full user list with return db.Users;
So what method needs added to my repository and how should my view model look?
I am not sure how to fine tune this, but it seems to me like it should be rather simple. I have a RadComboBox on my page that only has two possible values:
[Code]....
When the user changes it to "Joint" I want the asp panel named 'CoApplicant' to become visible. If changed back, then hide again. Here is my javascript code which is not working:How do I hide that panel based on the selection?
I have a web part that is deployed in a MOSS 2007 application. The web part has a text box for entry of an ID number and a button that fills a dataset from the db based on the supplied ID and binds this to a details view. The details view is a private variable declared at the top of my web part class, the details view is then instantiated and various properties set along with the event handlers in the CreateChildControls() Sub.
[Code]....
The details view is then rendered in the RenderContents() sub.
[Code]....
After checking the user inputted ID number for malicious chars I fill a data set.
[Code]....
The problem is that when I click the auto generated Edit link nothing happens and if I then click it for a second time the editable text boxes appear but have no data in them and my data key appears to have been overwritten. I have also tried entering new values into the text boxes and clicking the Insert link and then looping through the NewValues collection inside the ItemUpdating event but this displays nothing!