How do you do role based security ?
1.Create a principle object which contains users identity
(login name) and array of roles
2.and pass this object to HttpContext.Current.User
3.The roles supplied to this object will be checked against
roles specified in the web.config file,if they matched then
they are allowed access to the page otherwise not.
allowed roles can be specified like this in web.config
<authorization>
<allow roles="Administrator,CanEdit"/>
<deny users="*" />
</authorization>
| Is This Answer Correct ? | 17 Yes | 1 No |
What are Action Methods in ASP.NET MVC?
what is deferred loading(lazy loading)?
What are the 3 segments of the default route, that is present in an ASP.NET MVC application?
What is global assembly cache
What is the difference between model view and controller?
How to bind table colum with gridview column?
How to answer for project questions..?
how many ways for pass the parameters in the fuction in c#
Can u tell me differences which are introduced in .Net 1.1 and 2.0 and 3.0 and also in 3.5 ? by detailed?
What are the difference between asynchronous controller implementation between asp.net mvc 3 & asp.net mvc 4?
differences between poco, model first and data first approach?
How to make sure Client Validation is enabled in ASP.Net MVC