Creating Custom Role Manager With Dynamic Menus in ASP.Net

Introduction

This article shows how to create a menu and sub menus depending on user roles and also how to provide read and write access to users.

The main point in this article is that depending on user login I will display a menu to users and admin.

Microsoft also provides its own tool, the Web Site Administration Tool (WAT) for managing user roles and authorization.

Which works in what way?

Tables used

dbo.MTDUsers
dbo.MTDMenu
dbo.MTDroles
dbo.MTDMenuSave
dbo.MTDSubMenu
dbo.MTDSubMenuSave

And I am also providing the entire solution with SQL script.

I will go through all the main points because this application is big.

For this I have created a Custom role manager with access rights.

Step 1

We can do Custom Authentication and Authorization in ASP.NET when the user registers with us.

Let's start with login and registration.

In this I have created a simple form for login and registration.



This registration details will be stored in Table dbo.MTDUsers.

After login we will display a menu and forms that users can access.

1. For creating and roles I have created a page [ AddRoles.aspx ]

Snapshot AddRoles.aspx

In this form, we will add roles, such as Admin, Users, SuperAdmin and so on.

On button Button1

<asp:Button ID="Button1" runat="server" Text="Save Roles" OnClick="Button1_Click" />

I have written code for saving roles in table (MTDroles).

I am also showing an error message if (TxtUserRoles.Text) is blank using script manager.

protected void Button1_Click(object sender, EventArgs e)
{
    if (TxtUserRoles.Text == "")
    {
         ScriptManager.RegisterStartupScript(this, this.GetType(), "alert",
         "alert('Please Enter User Role');", true);
    }
    else
    {
        SqlCommand cmd = new SqlCommand("MTDUserRolesInsert", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@RolesName", TxtUserRoles.Text);
        con.Open();
        cmd.ExecuteNonQuery();
        con.Close();
        TxtUserRoles.Text = "";
        getdata();
    }
}

And also binding a GridView as the user enters roles.

In this function, I am just getting all the data from the table (MTDroles) and displaying.

public void getdata()
{
  SqlCommand cmd = new SqlCommand("Usp_MTDgetroles", con);
  cmd.CommandType = CommandType.StoredProcedure;
  SqlDataAdapter da = new SqlDataAdapter();
  da.SelectCommand = cmd;
  DataSet ds = new DataSet();
  da.Fill(ds);
  if (ds.Tables.Contains("Table") == true)
  {
        if (ds.Tables[0].Rows.Count > 0)
        {
            GVRoles.DataSource = ds.Tables[0];
            GVRoles.DataBind();
        }
    }
}

I can also delete roles if I don't want them. But if it is used then it can't be deleted.

protected void GVRoles_RowCommand(object sender, GridViewCommandEventArgs e)
{
    if (e.CommandName == "Deleterole")
    {
        string id = e.CommandArgument.ToString();
        SqlCommand cmd = new SqlCommand("usp_DeleteRoles", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@RolesID", id);
        con.Open();
        string s = cmd.ExecuteScalar().ToString();
        con.Close();
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('" + s + "');", true);
    }
}

Step 2
 
I have now added the roles successfully. I will now assign roles to registered users.

Snapshot before adding users.

For assigning roles I am loading all the roles in the role dropdown list.

And in another drop-down list I am loading all the registered user names.

After selecting I am just going to assign roles.

On Pageload I am binding a dropdown list.

protected void Page_Load(object sender, EventArgs e)
{
    if (!IsPostBack)
    {
        Loadroles();
        DrpGetuser();
    }
}

Binding DrpRoles

public void Loadroles()
{
    SqlCommand cmd = new SqlCommand("Usp_MTDgetroles", con);
    cmd.CommandType = CommandType.StoredProcedure;
    SqlDataAdapter da = new SqlDataAdapter();
    da.SelectCommand = cmd;
    DataSet ds = new DataSet();
    da.Fill(ds);
    if (ds.Tables.Contains("Table") == true)
    {
        if (ds.Tables[0].Rows.Count > 0)
        {
             DrpRoles.DataSource = ds.Tables[0];
             DrpRoles.DataTextField = ds.Tables[0].Columns[1].ColumnName;
             DrpRoles.DataValueField = ds.Tables[0].Columns[0].ColumnName;
             DrpRoles.DataBind();
        }
    }
}

Binding DrpUser

Getting all roles from the table MTDUsers and displaying them:

protected void DrpGetuser()
{
    SqlCommand cmd = new SqlCommand("select * from MTDUsers", con);
    cmd.CommandType = CommandType.Text;
    SqlDataAdapter da = new SqlDataAdapter();
    da.SelectCommand = cmd;
    DataSet ds = new DataSet();
    da.Fill(ds);
    if (ds.Tables.Contains("Table") == true)
    {
         if (ds.Tables[0].Rows.Count > 0)
         {
                DrpUser.DataSource = ds.Tables[0];
                DrpUser.DataTextField = ds.Tables[0].Columns[1].ColumnName;
                DrpUser.DataValueField = ds.Tables[0].Columns[0].ColumnName;
                DrpUser.DataBind();
         }
     }
}

On Button Assign

Here I will update roles in the table MTDUsers.

For the update I am passing the following 2 parameters:

1. Roles
2. Userid

protected void btnassign_Click(object sender, EventArgs e)
{
    if (DrpUser.SelectedIndex == 0)
    {
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('Please select Username');", true);
    }
    else if (DrpRoles.SelectedIndex == 0)
    {
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('Please select Roles');", true);
    }
    else
    {
        SqlCommand cmd = new SqlCommand("usp_updateuserRole", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@UserID", DrpUser.SelectedValue);
        cmd.Parameters.AddWithValue("@RoleID", DrpRoles.SelectedValue);
        con.Open();
        string result = cmd.ExecuteScalar().ToString();
        con.Close();
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('" + result + "');", true);
    }
}

On drpUser SelectedIndexChanged I am binding a grid to show what roles are assigned to the users.

protected void DrpUser_SelectedIndexChanged(object sender, EventArgs e)
{
    if (DrpUser.SelectedIndex != 0)
    {
       getdata(DrpUser.SelectedValue);
   }
}
public void getdata(string UserID)
{
    SqlCommand cmd = new SqlCommand("usp_getallusers", con);
    cmd.CommandType = CommandType.StoredProcedure;
    cmd.Parameters.AddWithValue("@UserID", UserID);
    SqlDataAdapter da = new SqlDataAdapter();
    da.SelectCommand = cmd;
    DataSet ds = new DataSet();
    da.Fill(ds);
    if (ds.Tables.Contains("Table") == true)
    {
        if (ds.Tables[0].Rows.Count > 0)
        {
            GVRoles.DataSource = ds.Tables[0];
            GVRoles.DataBind();
        }
    }
}

Snapshot after assign.

Step 3

After assigning a role I will add a menu. [AddMenu.aspx]

For assigning the menu I just need to select roles.

Provide menu name.

Provide menu URL.

For example, how to enter the path of the URL: ../foldername/your page name

Path to enter: ../Contactus/SubContact.aspx

Create a separate folder for pages we will add.

 

I know you have questions in your mind, such as what to do if I have subpages.

Just keep them in the same folder such as Aboutus.aspx; that is the main page and if you use subaboutus.aspx then keep it in the same folder.

Snapshot of adding Menu

 

On page load I am binding a drop downlist and GridView.

protected void Page_Load(object sender, EventArgs e)
{
   if (!IsPostBack)
   {
        getdata();
        GetRoles();
    }
}

1. The getdata() method shows records as I enter data.

public void getdata()
{
    SqlCommand cmd = new SqlCommand("Usp_MTDgetMenu", con);
    cmd.CommandType = CommandType.StoredProcedure;
    SqlDataAdapter da = new SqlDataAdapter();
    da.SelectCommand = cmd;
    DataSet ds = new DataSet();
    da.Fill(ds);
    if (ds.Tables.Contains("Table") == true)
    {
         if (ds.Tables[0].Rows.Count > 0)
         {
                GVmenu.DataSource = ds.Tables[0];
                GVmenu.DataBind();
         }
    }
}

2. The GetRoles() method is for getting roles.

public void GetRoles()
{
     SqlCommand cmd = new SqlCommand("Usp_MTDgetMenu", con);
     cmd.CommandType = CommandType.StoredProcedure;
     SqlDataAdapter da = new SqlDataAdapter();
     da.SelectCommand = cmd;
     DataSet ds = new DataSet();
     da.Fill(ds);
     if (ds.Tables.Contains("Table1") == true)
     {
          if (ds.Tables[1].Rows.Count > 0)
          {
                DrpRoles.DataSource = ds.Tables[1];
                DrpRoles.DataTextField = ds.Tables[1].Columns[1].ColumnName;
                DrpRoles.DataValueField = ds.Tables[1].Columns[0].ColumnName;
                DrpRoles.DataBind();
         }
     }
}

On save button

Here depending on roles we are adding menu.

protected void Save_Click(object sender, EventArgs e)
{
    if (DrpRoles.SelectedIndex == 0)
    {
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('Please Select Roles');", true);
    }
    else if (TxtMenuname.Text == "")
    {
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('Please Enter Menu name');", true);
    }
    else if (txtmenuURL.Text == "")
    {
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('Please Enter Menu URL');", true);
    }
    else
    {
        SqlCommand cmd = new SqlCommand("Usp_MTDMTDMenuInsert", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@MenuName", TxtMenuname.Text);
        cmd.Parameters.AddWithValue("@MenuURL", txtmenuURL.Text);
        cmd.Parameters.AddWithValue("@RoleID", DrpRoles.SelectedValue);
        con.Open();
        cmd.ExecuteNonQuery();
        con.Close();
        getdata();
    }
}

Here I am saving data and also calling the getdata() method after saving for displaying the current data as I add it.

And GridView also has a delete feature for deleting.

GridView Snapshot.

protected void GVmenu_RowCommand(object sender, GridViewCommandEventArgs e)
{
     if (e.CommandName == "Deleterole")
     {
        string id = e.CommandArgument.ToString();
        SqlCommand cmd = new SqlCommand("usp_DeleteMTDMenu", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@MenuID", id);
        con.Open();
        string s = cmd.ExecuteScalar().ToString();
        ScriptManager.RegisterStartupScript(this, this.GetType(), "alert",
        "alert('" + s + "');", true);
          con.Close();
      }
}

Now we have completed the adding of the menu and will proceed to adding a submenu.

Step 4

Adding submenu for the Menu. [AddSubMenu.aspx]

Now we have completed the adding of the mainmenu and now we will add a submenu.

In other words if we have the main menu Chocolate.

All the submenus will be:

1. Strawberries chocolate.
2. Hazelnut chocolate
3. Caramel chocolate
4. Milk chocolate.

For adding a submenu we need to:

1. Select Roles
2. Enter Menu Name
3. Enter sub Menu Name
4. Enter sub Menu URL.
5. Last Save and its done.

On page load of [AddSubMenu.aspx]

protected void Page_Load(object sender, EventArgs e)
{
     if (!IsPostBack)
     {
            getdata();
            GetRoles();
      }
}

1. The getdata() method is for showing records as I enter data.

public void getdata()
{
     SqlCommand cmd = new SqlCommand("Usp_MTDgetSubMenu", con);
     cmd.CommandType = CommandType.StoredProcedure;
     SqlDataAdapter da = new SqlDataAdapter();
     da.SelectCommand = cmd;
     DataSet ds = new DataSet();
     da.Fill(ds);
     if (ds.Tables.Contains("Table") == true)
     {
          if (ds.Tables[0].Rows.Count > 0)
          {
                GVmenu.DataSource = ds.Tables[0];
                GVmenu.DataBind();
          }
    }
}

2. The GetRoles() method is for getting roles.

public void GetRoles()
{
    SqlCommand cmd = new SqlCommand("Usp_MTDgetroles", con);
    cmd.CommandType = CommandType.StoredProcedure;
    SqlDataAdapter da = new SqlDataAdapter();
    da.SelectCommand = cmd;
    DataSet ds = new DataSet();
    da.Fill(ds);
    if (ds.Tables.Contains("Table") == true)
    {
        if (ds.Tables[0].Rows.Count > 0)
        {
              DrpRoles.DataSource = ds.Tables[0];
              DrpRoles.DataTextField = ds.Tables[0].Columns[1].ColumnName;
              DrpRoles.DataValueField = ds.Tables[0].Columns[0].ColumnName;
              DrpRoles.DataBind();
        }
    }
}

After a page load on the change of the DrpRoles dropdownlist I am binding the Drpmenu dropdownlist.

Because depending on the Drproles dropdownlist I am binding the Drpmenu dropdownlist.

<asp:DropDownList ID="DrpRoles" Width="150px" runat="server" AppendDataBoundItems="True"
AutoPostBack="True" OnSelectedIndexChanged="DrpRoles_SelectedIndexChanged">
<asp:ListItem Value="0">Select</asp:ListItem>
</asp:DropDownList>

protected void DrpRoles_SelectedIndexChanged(object sender, EventArgs e)
{
   SqlCommand cmd = new SqlCommand("Usp_MTDGetMenuByRoles", con);
   cmd.Parameters.AddWithValue("@roleID", DrpRoles.SelectedValue);
   cmd.CommandType = CommandType.StoredProcedure;
   SqlDataAdapter da = new SqlDataAdapter();
   da.SelectCommand = cmd;
   DataSet ds = new DataSet();
   da.Fill(ds);
   if (ds.Tables.Contains("Table") == true)
   {
       if (ds.Tables[0].Rows.Count > 0)
       {
           DrpMenu.DataSource = ds.Tables[0];
           DrpMenu.DataTextField = ds.Tables[0].Columns[1].ColumnName;
           DrpMenu.DataValueField = ds.Tables[0].Columns[0].ColumnName;
           DrpMenu.DataBind();
       }
   }
}

 

Here you can see I have used the DrpRoles.SelectedValue for filling the Drpmenu dropdownlist.

After selecting and entering all the data I will click on the Save button to save the submenu.

protected void Save_Click(object sender, EventArgs e)
{
     SqlCommand cmd = new SqlCommand("Usp_MTDMTDMTDSubMenuInsert", con);
     cmd.CommandType = CommandType.StoredProcedure;
     cmd.Parameters.AddWithValue("@SubmenuName", txtsubmenu.Text);
     cmd.Parameters.AddWithValue("@SubMenuURL", txtmenuURL.Text);
     cmd.Parameters.AddWithValue("@MenuID", DrpMenu.SelectedValue);
     cmd.Parameters.AddWithValue("@RoleID", DrpRoles.SelectedValue);
     con.Open();
     cmd.ExecuteNonQuery();
     con.Close();
     getdata();
}

On save I am saving SubmenuName,SubmenuURL,MenuID,RoleID.

And you can see after saving data and also I am calling the getdata() method after.

Saving for displaying current data as I add it.

And GridView also has a delete feature for deleting.

Snapshot of adding a submenu.

Step 5
 
This is the Main process of Role Manager to save roles according to the user.

Here is a snapshot.

 

Here I took the following 2 DropDownLists:

1. Role
2. UserName.

After selecting Roles you will see a GridView that contains a Menu and Submenu.

This GridView contains all the data you entered into the menu and submenu.

Now you can provide the following rights to the page.

1. Read.
2. Write
3. Full Write

And click on the Save Role Assign Button to save its final step to do this.

The Design of [ AssignRoleToUser.aspx ]

1. Contains 2 Dropdownlist
2. GridView Inside Grideview 1 for Mainmenu and Other for Sub menu.

The Page Load Method of [ AssignRoleToUser.aspx ]

protected void Page_Load(object sender, EventArgs e)
{
    if (!IsPostBack)
    {
        LoadMenu();
        DrpGetuser();

    }
}

1. The GetRoles() method is for getting roles.

public void LoadMenu()
{
    SqlCommand cmd = new SqlCommand("Usp_MTDgetroles", con);
    cmd.CommandType = CommandType.StoredProcedure;
    SqlDataAdapter da = new SqlDataAdapter();
    da.SelectCommand = cmd;
    DataSet ds = new DataSet();
    da.Fill(ds);
    if (ds.Tables.Contains("Table") == true)
    {
        if (ds.Tables[0].Rows.Count > 0)
        {
            DrpRoles.DataSource = ds.Tables[0];
            DrpRoles.DataTextField = ds.Tables[0].Columns[1].ColumnName;
            DrpRoles.DataValueField = ds.Tables[0].Columns[0].ColumnName;
            DrpRoles.DataBind();
        }
    }
}

2. The DrpGetuser() method is for getting all the registered UserNames. sg

Save Button

<asp:Button ID="Save" runat="server" Text="Save Role Assign"
nclick="Save_Click" />

Here is the code snippets for the Save Button.

protected void Save_Click(object sender, EventArgs e)
{
    for (int i = 0; i < GridView1.Rows.Count; i++)
    {
        CheckBox CHKR = (CheckBox)GridView1.Rows[i].FindControl("CHKR");
        CheckBox CHKW = (CheckBox)GridView1.Rows[i].FindControl("CHKW");
        CheckBox CHKB = (CheckBox)GridView1.Rows[i].FindControl("CHKB");
        Label lblMenuName = (Label)GridView1.Rows[i].FindControl("lblMenuName");
        HiddenField HDMID = (HiddenField)GridView1.Rows[i].FindControl("HDmenuID");
        SqlCommand cmd = new SqlCommand("Usp_InsertMTDMenu", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@MenuID", HDMID.Value);
        cmd.Parameters.AddWithValue("@MenuName", lblMenuName.Text);
        if (CHKR.Checked)
        {
            cmd.Parameters.AddWithValue("@MRead", 1);
        }
        else
        {
            cmd.Parameters.AddWithValue("@MRead", 0);
        }
        if (CHKW.Checked)
        {
            cmd.Parameters.AddWithValue("@MWrite", 1);
        }
        else
        {
            cmd.Parameters.AddWithValue("@MWrite", 0);
        }
        if (CHKB.Checked)
        {
            cmd.Parameters.AddWithValue("@MBoth", 1);
        }
        else
        {
            cmd.Parameters.AddWithValue("@MBoth", 0);
        }
        cmd.Parameters.AddWithValue("@UID", DrpUser.SelectedValue);
        cmd.Parameters.AddWithValue("@RID", DrpRoles.SelectedValue);
        con.Open();
        cmd.ExecuteNonQuery();
        con.Close();
        GridView GV2 = (GridView)GridView1.Rows[i].FindControl("GridView2");
        for (int j = 0; j < GV2.Rows.Count; j++)
        {
            CheckBox CHKRSUB = (CheckBox)GV2.Rows[j].FindControl("CHKRSUB");
            CheckBox CHKWSUB = (CheckBox)GV2.Rows[j].FindControl("CHKWSUB");
            CheckBox CHKBSUB = (CheckBox)GV2.Rows[j].FindControl("CHKBSUB");
            Label lblsubmenu = (Label)GV2.Rows[j].FindControl("lblsubmenu");
            HiddenField HDsubmenuID = (HiddenField)GV2.Rows[j].FindControl("HDsubmenuID");
            SqlCommand cmd1 = new SqlCommand("Usp_InsertMTDSubMenu", con);
            cmd1.CommandType = CommandType.StoredProcedure;
            cmd1.Parameters.AddWithValue("@SubMenuID", HDsubmenuID.Value);
            cmd1.Parameters.AddWithValue("@SubMenuName", lblsubmenu.Text);
            if (CHKR.Checked)
            {
                cmd1.Parameters.AddWithValue("@SubMRead", 1);
            }
            else
            {
                cmd1.Parameters.AddWithValue("@SubMRead", 0);
            }
            if (CHKW.Checked)
            {
                cmd1.Parameters.AddWithValue("@SubMWrite", 1);
            }
            else
            {
                cmd1.Parameters.AddWithValue("@SubMWrite", 0);
            }

            if (CHKB.Checked)
            {
                cmd1.Parameters.AddWithValue("@SubMBoth", 1);
            }
            else
            {
                cmd1.Parameters.AddWithValue("@SubMBoth", 0);
            }
            cmd1.Parameters.AddWithValue("@SubUID", DrpUser.SelectedValue);
            cmd1.Parameters.AddWithValue("@SubRID", DrpRoles.SelectedValue);
            cmd1.Parameters.AddWithValue("@MainMenuID", HDMID.Value);
            con.Open();
            cmd1.ExecuteNonQuery();
            con.Close();
        }
    }
    ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('Data Saved Successfully');", true);
}

I know it is a little bit difficult to understand this.

Here in this code I have 2 GridViews in which I am showing a menu and submenu(s); now I need to store the data as per the selection made.

Let's start with GridView1.

Gridview1 has the following 3 Checkboxes:

1. Read
2. Write
3. Full control.

Here I am finding controls depending on Rowswise using a for loop.

for (int i = 0; i < GridView1.Rows.Count; i++)
 CheckBox CHKR = (CheckBox)GridView1.Rows[i].FindControl("CHKR");
 CheckBox CHKW = (CheckBox)GridView1.Rows[i].FindControl("CHKW");
 CheckBox CHKB = (CheckBox)GridView1.Rows[i].FindControl("CHKB");
 Label lblMenuName = (Label)GridView1.Rows[i].FindControl("lblMenuName");
 HiddenField HDMID = (HiddenField)GridView1.Rows[i].FindControl("HDmenuID");

Inside Save you have seen this code that checks if the checkbox is checked then enter 1 else enter 2.

if (CHKR.Checked)
{
     cmd.Parameters.AddWithValue("@MRead", 1);
}
else
{
    cmd.Parameters.AddWithValue("@MRead", 0);
}

Now I have used gridview2 inside gridview1 and I need to find that.

Here I have found the control.

GridView GV2 = (GridView)GridView1.Rows[i].FindControl("GridView2");

I have used 2 loops for finding the control inside 2 GridViews.

for (int j = 0; j < GV2.Rows.Count; j++)
  CheckBox CHKRSUB = (CheckBox)GV2.Rows[j].FindControl("CHKRSUB");
  CheckBox CHKWSUB = (CheckBox)GV2.Rows[j].FindControl("CHKWSUB");
  CheckBox CHKBSUB = (CheckBox)GV2.Rows[j].FindControl("CHKBSUB");
  Label lblsubmenu = (Label)GV2.Rows[j].FindControl("lblsubmenu");
  HiddenField HDsubmenuID = (HiddenField)GV2.Rows[j].FindControl("HDsubmenuID");

Here is the final view after data selection.

Step 6

The last menu that you can see. [EditMenu.aspx]

This form is the same as [AssignRoleToUser.aspx]

This form will come in use when you have created a menu and saved it; you need to change the rights for some menus.

Here you must select:

1. Role
2. User Name.

 

After selecting the UserName dropdownlist you will see that the data related to that role is loaded.

 

Here you change the rights and just click on save it.

Step 7

The last menu Is Login Test. To test whether or not the menu we created is proper click that menu and it will redirect to the Login Page.

 

Here now I am showing you how to create a menu.

Let's add Master for Access rights and display the menu.

1. My Master Name is Main.Master.

Master contains a Literal Control for displaying a menu that will be generated.

Add I am also adding JavaScript Script Referance to it for making the menu Dynamic.

And .CSS for look and feel.

Finally I have added a Panel with the name PnlMain and inside that it contains ContainplaceHolder.

<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
    <title></title>
    <link href="css/ddsmoothmenu.css" type="text/css" rel="stylesheet" />
    <script src="js/jquery.js" type="text/javascript"></script>
    <script src="js/ddsmoothmenu.js" type="text/javascript"></script>
    <asp:ContentPlaceHolder ID="head" runat="server">
    </asp:ContentPlaceHolder>
</head>
<body>
    <form id="form1" runat="server">
    <div>
        <asp:Literal ID="Literal1" runat="server"></asp:Literal>
        <script type="text/javascript">
           ddsmoothmenu.init
          ({
           mainmenuid: "smoothmenu2", //menu DIV id
          orientation: 'h', //Horizontal or vertical menu: Set to "h" or "v"
          classname: 'ddsmoothmenu', //class added to menu's outer DIV
                //customtheme: ["#1c5a80", "#18374a"],
          contentsource: "markup" //"markup" or ["container_id","path_to_menu_file"]
           })
        </script>
        <asp:Panel ID="PnlMain" runat="server">
            <asp:ContentPlaceHolder ID="ContentPlaceHolder1" runat="server">
            </asp:ContentPlaceHolder>
        </asp:Panel>
    </div>
    </form>
</body>
</html>

Here I am showing code snippets for generating a menu.

public void getmenu()
{
    if (Session["UserID"] == null)
    {
        Response.Redirect("Login.aspx");
   }
  else
  {
    con.Open();
    SqlCommand cmd = new SqlCommand("Usp_GetAllMenuofRole", con);
    cmd.CommandType = CommandType.StoredProcedure;
    cmd.Parameters.AddWithValue("@UserID1", Session["UserID"]);
    DataSet ds = new DataSet();
    SqlDataAdapter da = new SqlDataAdapter();
    da.SelectCommand = cmd;
    da.Fill(ds);
    StringBuilder ST = new StringBuilder();
    if (ds.Tables[0].Rows.Count > 0)
    {
         ST.Append("<div class='ddsmoothmenu' id='smoothmenu2'>");
         ST.Append("<ul>");
         for (int i = 0; i < ds.Tables[0].Rows.Count; i++)
         {
            string xid1 = ds.Tables[0].Rows[i]["MenuID"].ToString();
            string xid2 = ds.Tables[0].Rows[i]["MenuIDx"].ToString();
            string li = "<li style='z-index: 100;'>" + "<a href =" + ds.Tables[0].Rows[i]["MenuURL"].ToString() + "?MID1=" + xid1 + "&MID2=" + "M" + ">" + ds.Tables[0].Rows[i]["MenuName"].ToString() + "</a>";
           ST.Append(li);
           if (ds.Tables[0].Rows[i]["MenuID"].ToString() != null)
           {
                 SqlCommand cmd1 = new SqlCommand("Usp_Submenu", con);
                 cmd1.CommandType = CommandType.StoredProcedure;
                 cmd1.Parameters.AddWithValue("@userID", ds.Tables[0].Rows[i]["UID"].ToString());
                 cmd1.Parameters.AddWithValue("@MenuID", ds.Tables[0].Rows[i]["MenuID"].ToString());
                 DataSet ds1 = new DataSet();
                 SqlDataAdapter da1 = new SqlDataAdapter();
                 da1.SelectCommand = cmd1;
                da1.Fill(ds1);
                ST.Append("<ul style='top: 28px; visibility: visible; left: 0px; width: 118px; display: none;'>");
                for (int j = 0; j < ds1.Tables[0].Rows.Count; j++)
               {
                   string yid1 = ds1.Tables[0].Rows[j]["MenuID"].ToString();
                   string yid2 = ds1.Tables[0].Rows[j]["subMenuIDx"].ToString();
                   if (ds1.Tables[0].Rows[j]["SubmenuName"].ToString() != null)
                   {
                        string lix = "<li>" + "<a href =" + ds1.Tables[0].Rows[j]["SubMenuURL"].ToString() + "?S1ID=" + yid1 + "&S2ID=" + "S" + ">" + ds1.Tables[0].Rows[j]["SubmenuName"].ToString() + "</a>" + "</li>";
                        ST.Append(lix);
                   }
            }
     }
        ST.Append("</ul>");
        ST.Append("</li>");
     }
        ST.Append("</ul>");
       ST.Append("</div>");
       Literal1.Text = ST.ToString();
   }
}

In this code, I am designing the menu.

First I took:

StringBuilder ST = new StringBuilder();
ST.Append("<div class='ddsmoothmenu' id='smoothmenu2'>");
ST.Append("<ul>");

Here I used a StringBuilder because I need to append the string as it is generated.

You have also seen that I have appended ( div , ul).

SqlCommand cmd = new SqlCommand("Usp_GetAllMenuofRole", con);
cmd.CommandType = CommandType.StoredProcedure;
cmd.Parameters.AddWithValue("@UserID1", Session["UserID"]);
DataSet ds = new DataSet();
SqlDataAdapter da = new SqlDataAdapter();
da.SelectCommand = cmd;
da.Fill(ds);
StringBuilder ST = new StringBuilder();
if (ds.Tables[0].Rows.Count > 0)
{
    ST.Append("<div class='ddsmoothmenu' id='smoothmenu2'>");
    ST.Append("<ul>");
    for (int i = 0; i < ds.Tables[0].Rows.Count; i++)
    {
         string xid1 = ds.Tables[0].Rows[i]["MenuID"].ToString();
         string xid2 = ds.Tables[0].Rows[i]["MenuIDx"].ToString();
         string li = "<li style='z-index: 100;'>" + "<a href =" + ds.Tables[0].Rows[i]["MenuURL"].ToString() + "?MID1=" + xid1 + "&MID2=" + "M" + ">" + ds.Tables[0].Rows[i]["MenuName"].ToString() + "</a>";
         ST.Append(li);
      }
}

Then you can see that depending on use login I am getting UserID in Session.

I am passing session[UserID] to the Stored Procedure Usp_GetAllMenuofRole and getting all the menus from that procedure in the dataset and then using a loop to get all the rows in the dataset.

Now I am getting a menu Id depending on row and storing in xid1 and xid2.

MenuID contains the ID.

MenuIDx contains Type. “M”

string xid1 = ds.Tables[0].Rows[i]["MenuID"].ToString();
string xid2 = ds.Tables[0].Rows[i]["MenuIDx"].ToString();
string li = "<li style='z-index: 100;'>" + "<a href =" + ds.Tables[0].Rows[i]["MenuURL"].ToString() + "?MID1=" + xid1 + "&MID2=" + "M" + ">" + ds.Tables[0].Rows[i]["MenuName"].ToString() + "</a>";

In string <li> I have passed a string that contains:

<li> </li> tags with achor tag inside it.
<a href =” URL ”> contains path and Passing Query String of MenuID and MenuType.
<a href =” URL ”> Here I am displaying Name of Menu </a>

After adding a Main Menu inside it I am adding a submenu with the same process.

Here is the code snippet:

SqlCommand cmd1 = new SqlCommand("Usp_Submenu", con);
cmd1.CommandType = CommandType.StoredProcedure;
cmd1.Parameters.AddWithValue("@userID", ds.Tables[0].Rows[i]["UID"].ToString());
cmd1.Parameters.AddWithValue("@MenuID", ds.Tables[0].Rows[i]["MenuID"].ToString());
DataSet ds1 = new DataSet();
SqlDataAdapter da1 = new SqlDataAdapter();
da1.SelectCommand = cmd1;
da1.Fill(ds1);
ST.Append("<ul style='top: 28px; visibility: visible; left: 0px; width: 118px; display: none;'>");
for (int j = 0; j < ds1.Tables[0].Rows.Count; j++)
{
    string yid1 = ds1.Tables[0].Rows[j]["MenuID"].ToString();
    string yid2 = ds1.Tables[0].Rows[j]["subMenuIDx"].ToString();
    if (ds1.Tables[0].Rows[j]["SubmenuName"].ToString() != null)
    {
       string lix = "<li>" + "<a href =" + ds1.Tables[0].Rows[j]["SubMenuURL"].ToString() + "?S1ID=" + yid1 + "&S2ID=" + "S" + ">" + ds1.Tables[0].Rows[j]["SubmenuName"].ToString() + "</a>" + "</li>";
       ST.Append(lix);
    }
}

I am passing UserId and Menuid and depending on it I am loading a submenu.

I have the same process as it is for the main menu.

After login you will see the menu that was generated.

Now the last part is how to apply Read and Write access to the pages.

For that I have written the following code that will read a Query string and that will pass something with a menu and submenu and load the rights from the table depending on it.

This code is only for the page load of the Master Page.

protected void Page_Load(object sender, EventArgs e)
{
    if (!IsPostBack)
    {
        getmenu();
        string MenuType = Request.QueryString["MID2"];
        string subMenutype = Request.QueryString["S2ID"];
        string MenuID = Request.QueryString["MID1"];
        string subMenuID = Request.QueryString["S1ID"];
        if (MenuType != null)
        {
               SqlCommand cmd1 = new SqlCommand("Usp_GetAllRoles", con);
               if (MenuType != null)
               {
                   cmd1.Parameters.AddWithValue("@Menutype", MenuType);
               }
              else if (subMenutype != null)
              {
                   cmd1.Parameters.AddWithValue("@Menutype", subMenutype);
              }
              if (MenuID != null)
              {
                   cmd1.Parameters.AddWithValue("@ID", MenuID);
              }
              else if (subMenuID != null)
               {
                   cmd1.Parameters.AddWithValue("@ID", subMenuID);
               }
               cmd1.Parameters.AddWithValue("@RID", Session["RoleID"]);
               cmd1.Parameters.AddWithValue("@UID", Session["UserID"]);
               cmd1.CommandType = CommandType.StoredProcedure;
               SqlDataAdapter da1 = new SqlDataAdapter();
               da1.SelectCommand = cmd1;
               DataSet ds1 = new DataSet();
               da1.Fill(ds1);
               if (ds1.Tables.Contains("Table") == true)
               {
                   if (ds1.Tables[0].Rows.Count > 0)
                   {
                       if (ds1.Tables[0].Rows[0]["MRead"].ToString() == "1")
                       {
                           PnlMain.Enabled = false;
                       }
                       else if (ds1.Tables[0].Rows[0]["MBoth"].ToString() == "1")
                       {
                           PnlMain.Enabled = true;
                       }
                       else if (ds1.Tables[0].Rows[0]["MWrite"].ToString() == "1")
                       {
                           PnlMain.Enabled = true;
                       }
                       else
                       {
                           PnlMain.Enabled = false;
                       }
               }
           }
       }
   }
}

I am using a panel to make the Page Read and Write.

Here is the menu that was generated.

Here is the form with write access control.

That is why we can enter data into this form.

 

Here is the home form which has read only rights.

Here you cannot enter the data, you can just view it.