Manage Authorization using config file

Suri Meenakshi Sundaram

The text of this article is not in this database — only its details are. The old site it was published on is gone, but the Internet Archive kept a copy: Manage Authorization using config file

ASP.NET restrict user directoryASP.NET restrict user pageASP.NET restrict user page or directoryAuthorization using config fileConfigure Membership provider in Config fileManage Authorization using config file

4 Comments

Join the conversation! Your thoughts help the community grow.

Suresh Paldia16y ago
Good article Suri, but i am new to asp.net. can u tell me where these roles like administrator and users like user1 and user2 are defined? Can i have any roles of my wish?
- Biju s Nair16y ago
  Suri, Nice article How we will use AD integrated users and Roles
- Suri Meenakshi Sundaram16y ago
  Thanks Suresh!!!. if you want to use the Role, you have to do following things Need to Enable Role Manager In Web.config. File, as <system.web> <roleManager enabled="true" /> </system.web> After that you have to Specify the Provider inside the Rolemanager. For Example if you are using Default Provider AspNetSqlRoleProvider defined in the Machine.config file. this uses the Sql Express Instance. to use the role store in Sql server and add a connecting String as shown below <configuration> <connectionStrings> <add name="MySqlRoleManagerConnection" connectionString="Data Source=sqlinstance; Initial Catalog=aspnetdb;Integrated Security=SSPI;"> </add> </connectionStrings> </configuration> then you have to use the Provider, which you have to mention it inside role manager for example is as shown below: you have to use the same Connection string to refer the Sql server <roleManager enabled="true" defaultProvider="MySqlRoleManager"> <providers> <add name="MySqlRoleManager" type="System.Web.Security.SqlRoleProvider" connectionStringName="MySqlRoleManagerConnection" applicationName="MyApplicationname" /> </providers> </roleManager> Now you can able to Manage Authorization using web.config. if you want to use it in code use the following namespace using System.Web.Security; then if you want to Create new Role Roles.CreateRole("Administrator"); if you want to add users to the role as below Roles.AddUserToRole("Suri", "Administrator"); Hope it will help you to understand.
- Suri Meenakshi Sundaram16y ago
  Thanks Biju, You can use “Active Directory membership provider”.<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p> To configure the Membership provider, you have to add a connectiong string that points to yours active directory users Example: <connectionStrings> <add name="ActiveDirectoryConnectionString" connectionString="LDAP://testdomain.test.com/CN=Users,DC=testdomain,DC=test,DC=com" /> </connectionStrings> In this above example: connection string that connects to the user's container within a domain (testdomain.test.com ). You need to update this String to point to the relevant user’s container within your domain. <o:p> </o:p> Then you have to add a <membership > element after <authorization><o:p></o:p> <o:p> </o:p> Example:<o:p></o:p> <membership defaultProvider="MyActiveDirectoryMembershipProvider"><o:p></o:p> <providers><o:p></o:p> <add name="MyADMembershipProvider" type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0, <o:p></o:p> Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"<o:p></o:p> connectionStringName=" ActiveDirectoryConnectionString"<o:p></o:p> connectionUsername="testdomain\administrator" <o:p></o:p> connectionPassword="password"/><o:p></o:p> </providers><o:p></o:p> </membership><o:p></o:p> <o:p> </o:p> Note: you have to use the same connectionstring name here which you already used in the Connection string section to connect the Active Directory(AD). <o:p> </o:p> Please refer the following link to know more about ActiveDirectoryMembershipProvider Class<o:p></o:p> <o:p> </o:p> http://msdn.microsoft.com/en-us/library/system.web.security.activedirectorymembershipprovider.aspx Hope it will help you. Please feel free to post your comments