I have developed an ASP.NET MVC 2 application on Framework 4. I have an 'Administration' link on the home page. My query is, what is the best approach of displaying the 'Administration' link only to the users in the role administrator and hiding it from others keeping in mind the Seperation of Concern bit.
I have four Imagebuttons that I want to disable depending on the Role the user belongs too. I know how do do this in a gridview or detailsview but for some reason it isn't working on just a plain form. So when a User who is not in the "Admin" role logs onto the page he either doesn't see the button or the hyperlink has been disabled thus not allowing him to proceed any further.
Suppose the Gridview on the page is for showing the detail records of the Header master record on the same page. How to disable the "Edit" within the Gridview? I would like to disable the "choose" in the Popup of the Gridview and also to disable any buttons of that.
I'm trying to allow logged user who are in department XYZ to perform some task for my third party App. I have two SQL tables named Users & UserList. The third party app (GoldMine) graps the USERNAME from the Users table and store it as UserID which I then referecnce SessionID. The UserList table has two columns (GM_UserName & Department) which I'm interested in. When a user login into the 3rd party app (GoldMine), i then compare the USERNAME (from Users table) to GM_UserName (from UserList table) and see whether GM_UserName is in = 'Dept XYZ'. Take a look at the SQL query below.
sqlDept = "SELECT USERNAME FROM Users LEFT JOIN UserList ON UserList.GM_UserName=Users.UserName WHERE UserList.Department ='Dept XYZ'"
I'm able to do this.
If Session("Userid") = "TestUser1" Or Session("UserID") = "TestUser2" Then Do this Else Do that End If BUT unable to do this... If user's Department = 'Department XYZ' Then Do This Else Do that End IF
I have two InlineEditBox.NET controls in a template field inside a GridView. When displayed in the GridView, the first row is OK, but starting with the second row, the controls are automatically displayed in edit mode when the page loads, and I can't figure out why.
I have a simple intranet site. It has a role based authorization in the web.config file.
Any user's in a specific role called as "Apr-Sales-Writers" will be authorized to use those pages. If not, they will not be authorized. So far so good. Works fine. But we added additional functionality where a new active directory group (means new role) has to be added and user's belonging to this new AD group should be given access to only specific .aspx pages on the intranet site. I am using a web.sitemap and it looks like this.
If the user's belong to say AD group "Apr-Sales-Writers", they should access only default.aspx and salesData.aspx pages. User's belonging to new AD group (which I did not include in the web.config file below), should have access to other .aspx pages.
In one of my Web Page, there is one Modal Pop up, in which I am using Gridview Edit, Update, CancelEdit, Delete functionality.Main functionality is : If while deleting any of the Gridview Row, if only 1 row remains in Gridview (that row can be any row), then that row should not get deleted.Rest of Edit, Update, CancelEdit functionally is working fine.
problem is: When any last row is left in Gridview, its Delete button is disables that time (as per requirement and functionality). But when user clicks on Gridview "Edit" button, update section opens, and at that time "Delete" button gets Enabled, so that time user can delete the last row of Gridview which should not be done.I had fixed this problem for "Cancel" and "Update" button of Gridview using below line:
Response.Redirect(Request.Url.AbsoluteUri); but unable to fix it for "Edit" button of Gridview. If Last row is left in Gridview , and user clicks on Gridview "Edit" button of that row, then at that time "Delete" button should not get "enabled" it should remain "disabled"
Our team has recently implemented a role permission based authorization so that we can have granular control. This is similar to what Rockford Lhotka suggests herehttp://www.lhotka.net/weblog/PermissionbasedAuthorizationVsRolebasedAuthorization.aspx I have also read about the Claims based authorization which to me looks very similar to what we have. Can some one put in simple terms what the advantages of claims based authorization are.
I am trying to generate a gridview dynamically through codebehind. So I am making all the columns through code using BoundField and other controls.Now I am trying to to put a edit button in the gridview sand program that(I made a RowEditing handler). Right now all my code is in the page_load but when I hit the edit button in the gridview I get 2 gridviews back on post back.So I tried to put a isPostback if statement to stop this but then I just get a error back saying it can't find the handler.
I want to know how can I display role-specific markup using loginview?
I have these three roles, Admin, Editor, Moderator
Each and every user will belog to only one of the following role groups
1. Admin, Editor, Moderator (Some user/s will have all these three roles) 2. Admin, Editor (Some user/s will have all these two roles) 3. Admin, Moderator (Some user/s will have all these two roles) 4. Editor, Moderator (Some user/s will have all these two roles) 5. Admin (Some user/s will have all only this role) 6. Editor (Some user/s will have all only this role) 7. Moderator (Some user/s will have all only this role)
Now I want to display some links that will be specific for each role group to which one or more users will belong. So the links I want to display for these role groups are following
1. Admin, Editor, Moderator => Only Links of all the pages of Admin, Editor and Moderator 2. Admin, Editor => Only Links of all the pages of Admin and Editor 3. Admin, Moderator => Only Links of all the pages of Admin and Moderator 4. Editor, Moderator => Only Links of all the pages of Editor and Moderator 5. Admin => Only Links of all the pages of Admin 6. Editor => Only Links of all the pages of Editor 7. Moderator => Only Links of all the pages of Moderator
I have tried doing this using RoleGroups in Loginview but couldn't succed.
Can anybody let me know the correct way of going this?
I have a Transport Detaisl in DB , i want to dispay data on gridview with marquee scrolling up. Cabs are scheduled for drop every hour. So if drop is at 7pm i hav to dispaly on data of that hour from 6:30 to 7:15 later after 7:15 i have to display next hour data ie 8:00 pm drop data. I am able to get scrollin g data on gridview but how to schedlue it to scroll for such timings
In my application when I press the edit button from Gridview I need to open the information in another window. At this moment I use 'Response.Redirect("..")' but it opens in the same window.
1) I'm currently working for HR application with security roles
2) for that I created dynamic menu and set data source to sitemapprovider control with "AspNetSqlSiteMapProvider"
Now my client requirement is to change menu's based on drop down selection so that menus will be minimum and quite user friendly.for that I did following steps:-
Created Drop Down contains list of all Roles provided him in Master Page In Menu1_MenuItemDataBound event I grabbed the roles for that node and compared with role selected in drop down and deleted that node now what i need is on drop down_selected index change I want to recreate menu.
I have seen articles on Role Based Authorization in MS-Sql server-Asp.net but i did not find any article in MySql-ASP.net/vb.net, i am acheived this concept using session user name i am enabling certain parts of website to group A and certain parts of site to Group B but when i have more groups i cannot use this method.
Myrequirement is:
In Web applications, typically there exist certain parts of the site that only certain folks, or groups of persons can access. For example, imagine Web site used to administer the content on a company's public Internet Web site, where the public Web site lists products sold by the company. From the administrative site, all company employees might be able to make minor changes to the products' descriptions, quantity, and other such non-essential information. However, perhaps only a subset of trusted employees might be able to change the products' prices. And even a smaller subset of employees would be able to add new products or delete existing products from the database I would be delighted if any one provide the solution
How can I implement role based security that would show the admin tab if the user was logged in as a admin by using (ul-li) like the below code as a simple example. I do not want to use the menu control is this possible ?
I am building an ASP.NET 3.5 Web Application and I am NOT using the membership provider for security. In the application I have a role named Admin and all the files for this role are inside the Security folder in the project. Currently for all the pages inside the security folder I am checking to see if the logged in user's role is an Admin or not. This to me seems very redundant, can do something like "If the user is requesting a page inside the security folder then check his role".
How to access datas based on user roles in asp.net ? For example : i have two admins (admin1, admin2). In the frontend ,admin1 has full access to datas(view,add,edit,delete all datas) while admin2 has limited access to datas(view,add,edit,delete certain datas alone and not all datas)
I have a gridview to display data, and one of columns was the file path (string). I want to when switch to edit mode, this column will be a editbox + a button, (so if the user click on the button, an OpenFileDialog will be show and he can select a new file) How can I do that?