access to page for various user

hi
i have 3 difference user type in my project
1)user
2)institution
3)employee
in my project ,i want to permit employee to access page that i define .
for example:
page1 emolpyee1 can view it
but page1 employee2 can not view it.
I control my form with sql.i built table and check access.my roles are not limit.i think it is better that i create table with my name page,and userid and control users with this table.is it a good solution?

n p I would say to start with reading http://www.c-sharpcorner.com/UploadFile/praveenalwar/PraveenAlwar07202006064726AM/PraveenAlwar.aspx. If you want to follow what you have already done I would say to inherit the Page class into something like BasePage and handle your role validation there. That way all your other pages will inherit from that BasePage with the security check in place.

public class BasePage : System.Web.UI.Page

{

protected override void OnPreLoad(EventArgs e) { base.OnPreLoad(e); CheckForAccess(); }

protected void CheckForAccess() { if (HttpContext.Current.User.Identity.IsAuthenticated) { if (m_userSession.CurrentUser != null) { try { List groups = m_userSession.CurrentUser.Groups; string matched = (from g1 in groups join g2 in m_groups on g1 equals g2 select g1).FirstOrDefault(); if (string.IsNullOrEmpty(matched)) throw new Exception("Access to tab is restricted for user group."); } catch (Exception) { CustomPermission(); } } } }

}

In the example above, m_groups are the allow groups (roles) for the page. It is not included in the code, but there is a virtual function that all pages can override to add the roles they want to allow.

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Felipe Ramos16y ago
n p I would say to start with reading http://www.c-sharpcorner.com/UploadFile/praveenalwar/PraveenAlwar07202006064726AM/PraveenAlwar.aspx. If you want to follow what you have already done I would say to inherit the Page class into something like BasePage and handle your role validation there. That way all your other pages will inherit from that BasePage with the security check in place.

public class BasePage : System.Web.UI.Page
{
protected override void OnPreLoad(EventArgs e) { base.OnPreLoad(e); CheckForAccess(); }

protected void CheckForAccess() { if (HttpContext.Current.User.Identity.IsAuthenticated) { if (m_userSession.CurrentUser != null) { try { List groups = m_userSession.CurrentUser.Groups; string matched = (from g1 in groups join g2 in m_groups on g1 equals g2 select g1).FirstOrDefault(); if (string.IsNullOrEmpty(matched)) throw new Exception("Access to tab is restricted for user group."); } catch (Exception) { CustomPermission(); } } } }
}

In the example above, m_groups are the allow groups (roles) for the page. It is not included in the code, but there is a virtual function that all pages can override to add the roles they want to allow.