Role Based Access Of An MVC Application

Rahul Kumar Saxena

11y175.7k45100Article

ASP.NET MVCrole-based access

45 Comments

Join the conversation! Your thoughts help the community grow.

skyline le8y ago
I am facing error on role controller, code: var Roles = context.Roles.Tolist(); it saying error on .Roles error message: you are missing using directives or an assembly reference?
Bhaskar Reddy8y ago
The ViewData item that has the key 'Name' is of type 'System.String' but must be of type 'IEnumerable<SelectListItem> here the error is
- Arya ag8y ago
  Add this line before return View to the Register Method: ViewBag.Name = new SelectList(context.Roles.ToList(), "Name", "Name"); because the post method returns it empty to the view (you must have it in both register methods)
- Shriya Bramdeo8y ago
  I'm getting the same error, Did you find a solution?
Bhaskar Reddy8y ago
Getting the error it is related to dropdown list error try to explain in brif
Bhaskar Reddy8y ago
The ViewData item that has the key 'Name' is of type 'System.String' but must be of type 'IEnumerable<SelectListItem>
Ramendra kumar verma8y ago
Can you provide db script
bishoe nb8y ago
The ViewData item that has the key 'Name' is of type 'System.String' but must be of type 'IEnumerable<SelectListItem>
- Chandrakant Kumawat8y ago
  In AccountController > Task<ActionResult> Register() action there is a line : var result = await UserManager.CreateAsync(user, model.Password);. put a break point there and try again. You will found that some server side validation for password is getting failed for "Passwords must have at least one non letter or digit character. Passwords must have at least one uppercase ('A'-'Z')."And because of this Viewbag.Name left unassigned values (null), hence it is breaking at the time of rendering. So we need to assigne an list of SelectItem in Viewbag.Name by using the following code "ViewBag.Name = new SelectList(context.Roles.ToList(), "Name", "Name");" Try this, I am sure now you would be able to run that. :-) Happy Coding.....
Aieza Khan8y ago
I got this error The ViewData item that has the key 'Name' is of type 'System.String' but must be of type 'IEnumerable<SelectListItem>'.
- Chandrakant Kumawat8y ago
  In AccountController > Task<ActionResult> Register() action there is a line : var result = await UserManager.CreateAsync(user, model.Password);. put a break point there and try again. You will found that some server side validation for password is getting failed for "Passwords must have at least one non letter or digit character. Passwords must have at least one uppercase ('A'-'Z')."And because of this Viewbag.Name left unassigned values (null), hence it is breaking at the time of rendering. So we need to assigne an list of SelectItem in Viewbag.Name by using the following code "ViewBag.Name = new SelectList(context.Roles.ToList(), "Name", "Name");" Try this, I am sure now you would be able to run that. :-) Happy Coding.....
suraj mandal9y ago
Thank you so much sir for ur code it helped me a lot
lee sc9y ago
Sorry for interruptionI get this error while register The ViewData item that has the key 'Name' is of type 'System.String' but must be of type 'IEnumerable<SelectListItem>'. Source Error: Line 35: <div class="col-md-10"> Line 36: @*@Html.DropDownList("Name")*@ Line 37: @Html.DropDownList("Name", (SelectList) ViewBag.Name, "--Choose Role--") Line 38: </div> Line 39: </div>
- Chandrakant Kumawat8y ago
  In AccountController > Task<ActionResult> Register() action there is a line : var result = await UserManager.CreateAsync(user, model.Password);. put a break point there and try again. You will found that some server side validation for password is getting failed for "Passwords must have at least one non letter or digit character. Passwords must have at least one uppercase ('A'-'Z')."And because of this Viewbag.Name left unassigned values (null), hence it is breaking at the time of rendering. So we need to assigne an list of SelectItem in Viewbag.Name by using the following code "ViewBag.Name = new SelectList(context.Roles.ToList(), "Name", "Name");" Try this, I am sure now you would be able to run that. :-) Happy Coding.....
Delpin Susai Raj10y ago
Nice
Rahul Kumar Saxena11y ago
Welcome Kinshuk goel
Kapil Goel11y ago
thanx sir
Rahul Kumar Saxena11y ago
Kinshuk goel Check you Role Drop Down here.. in Register.cshtml...
Rahul Kumar Saxena11y ago
Thanks. Saineshwar Bageri
Saineshwar Bageri11y ago
nice one
Rahul Kumar Saxena11y ago
Thank u Ankit Bansal
Ankit Bansal11y ago
Great one..
Rahul Kumar Saxena11y ago
Thanks Santhakumar Munuswamy
Santhakumar Munuswamy11y ago
Thanks for nice article:)
Rahul Kumar Saxena11y ago
Thank u Pankaj Kumar Choudhary
Rahul Kumar Saxena11y ago
Thank u Akash Malhotra
Rahul Kumar Saxena11y ago
Thank u Mohammed Ibrahim
- Kapil Goel11y ago
  public async Task<ActionResult> Register(RegisterViewModel model) { if (ModelState.IsValid) { var user = new ApplicationUser { UserName = model.Email, Email = model.Email }; var result = await UserManager.CreateAsync(user, model.Password); if (result.Succeeded) { //Assign Role to user Here await this.UserManager.AddToRoleAsync(user.Id, model.Name); //Ends Here await SignInManager.SignInAsync(user, isPersistent: false, rememberBrowser: false); return RedirectToAction("Index", "Home"); } AddErrors(result); } // If we got this far, something failed, redisplay form return View(model); } Followed the Complete Process Twice But it showing me Error in model.Name (Name is not coming)
Pankaj Kumar Choudhary11y ago
Nice Article Sir..........
Akash Malhotra11y ago
Nice article
Mohammed Ibrahim11y ago
nice..
Rahul Kumar Saxena11y ago
Thanks Rajeesh Menoth
Rahul Kumar Saxena11y ago
Thanks Humayun Kabir Mamun
Rahul Kumar Saxena11y ago
Thanks Ujjval shukla
Rahul Kumar Saxena11y ago
Thanks Ratnesh Singh
Rahul Kumar Saxena11y ago
Thanks Karthikeyan K
Rahul Kumar Saxena11y ago
Thanks Harshad Pansuriya
Rahul Kumar Saxena11y ago
Thank u Upendra Pratap Shahi
Rajeesh Menoth11y ago
Good One,Thanks for sharing...
Humayun Kabir Mamun11y ago
Nice...
Ujjval Shukla11y ago
Useful article sir..
Ratnesh Singh11y ago
Good one..
Karthikeyan K11y ago
Good one sir...Thanks for sharing
Harshad Pansuriya11y ago
Nice One
Upendra Pratap Shahi11y ago
nice share sir

Here while adding new user we will assign role to this user, so I am showing role in a dropdown list:

// GET: /Account/Register
[AllowAnonymous]
public ActionResult Register()
{
ViewBag.Name = new SelectList(context.Roles.ToList(), "Name", "Name");
return View();
}

I made a change here in Register View and added a dropdown to select Role:

Go to My Views, then Account and Register.cshtml:

@model RoleBasedAppAccess.Models.RegisterViewModel
@{
ViewBag.Title = "Register";
}
<h2>@ViewBag.Title.</h2>
@using (Html.BeginForm("Register", "Account", FormMethod.Post, new { @class = "form-horizontal", role = "form" }))
{
@Html.AntiForgeryToken()
<h4>Create a new account.</h4>
<hr />
@Html.ValidationSummary("", new { @class = "text-danger" })
<div class="form-group">
@Html.LabelFor(m => m.Email, new { @class = "col-md-2 control-label" })
<div class="col-md-10">
@Html.TextBoxFor(m => m.Email, new { @class = "form-control" })
</div>
</div>
<div class="form-group">
@Html.LabelFor(m => m.Password, new { @class = "col-md-2 control-label" })
<div class="col-md-10">
@Html.PasswordFor(m => m.Password, new { @class = "form-control" })
</div>
</div>
<div class="form-group">
@Html.LabelFor(m => m.ConfirmPassword, new { @class = "col-md-2 control-label" })
<div class="col-md-10">
@Html.PasswordFor(m => m.ConfirmPassword, new { @class = "form-control" })
</div>
</div>
<div class="form-group">
@Html.Label("Select Your User Type", new { @class = "col-md-2 control-label" })
<div class="col-md-10">
@*@Html.DropDownList("Name")*@
@Html.DropDownList("Name", (SelectList)ViewBag.Name, "--Choose Role--")
</div>
</div>
<div class="form-group">
<div class="col-md-offset-2 col-md-10">
<input type="submit" class="btn btn-default" value="Register" />
</div>
</div>
}
@section Scripts {
@Scripts.Render("~/bundles/jqueryval")
}

I updated Controller, then Account and Register.

[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public async Task<ActionResult> Register(RegisterViewModel model)
{
if (ModelState.IsValid)
{
var user = new ApplicationUser { UserName = model.Email, Email = model.Email };
var result = await UserManager.CreateAsync(user, model.Password);
if (result.Succeeded)
{
//Assign Role to user Here
await this.UserManager.AddToRoleAsync(user.Id, model.Name);
//Ends Here
await SignInManager.SignInAsync(user, isPersistent: false, rememberBrowser: false);
return RedirectToAction("Index", "Home");
}
AddErrors(result);
}
// If we got this far, something failed, redisplay form
return View(model);
}

Run your application and click Register:

Figure 18

Run your application

Figure 19

Now again make a registration.

Figure 20

Now see your data in your Server Explorer:

AspNetUsers

Figure 21

Figure 22

Now suppose we have 2 pages in my application. I want the Admin to access only Admin page and normal user can access User page. I am going to give link on header for these 2 pages.

So for this I am going to add a Folder, then CustomFilters and Add here a class-> AuthLogAttribute.cs and write the following code:

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
namespace RoleBasedAppAccess.CustomFilters
{
public class AuthLogAttribute : AuthorizeAttribute
{
public AuthLogAttribute()
{
View = "AuthorizeFailed";
}
public string View { get; set; }
/// <summary>
/// Check for Authorization
/// </summary>
/// <param name="filterContext"></param>
public override void OnAuthorization(AuthorizationContext filterContext)
{
base.OnAuthorization(filterContext);
IsUserAuthorized(filterContext);
}
/// <summary>
/// Method to check if the user is Authorized or not
/// if yes continue to perform the action else redirect to error page
/// </summary>
/// <param name="filterContext"></param>
private void IsUserAuthorized(AuthorizationContext filterContext)
{
// If the Result returns null then the user is Authorized
if (filterContext.Result == null)
return;
//If the user is Un-Authorized then Navigate to Auth Failed View
if (filterContext.HttpContext.User.Identity.IsAuthenticated)
{
// var result = new ViewResult { ViewName = View };
var vr = new ViewResult();
vr.ViewName = View;
ViewDataDictionary dict = new ViewDataDictionary();
dict.Add("Message", "Sorry you are not Authorized to View this Page");
vr.ViewData = dict;
var result = vr;
filterContext.Result = result;
}
}
}
}

Figure 23

Now Add 2 Controllers: 1. Admin 2. Users.

Add view for both controller as in the following screenshot:

Figure 24

Now Set Access permission. Open Admin Controller and write the following code above your index action method:

method

Figure 25

Controller-> Users:

Figure 26

Now open Views, then Shared and click _Layout.cshtml. After that add link button to add Access to these 2 pages:

<div class="navbar-collapse collapse">
<ul class="nav navbar-nav">
<li>@Html.ActionLink("Manage Role", "Index", "Role")</li>
<li>@Html.ActionLink("ADMIN PAGE", "Index", "Admin")</li>
<li>@Html.ActionLink("USER PAGE", "Index", "Users")</li>
</ul>
@Html.Partial("_LoginPartial")
</div>

Now run the application:

Figure 27

Click on ADMIN PAGE Link:

Figure 28

You will redirect to login page. Now login with [email protected] which is in Admin Role.

Figure 29

Now click on USER PAGE as [email protected] is an ADMIN user and can’t access others Role page:

Role

Figure 30

Now Login as [email protected] which is in User Role:

Figure 31

If you try to access ADMIN PAGE, the following error message will be visible:

error

Figure 32