Authorize specific user from database

Shibly Sadik

11y1.1k.NET

I want to prevent access my action methods from all users except one.How can i authorize a specific user from my database model?? help please....

5 Replies

Know the answer? Post it — somebody with the same question will find it here.

Afzaal Ahmad Zeeshan11y ago
ASP.NET Identity is the authentication system in ASP.NET. You need to first learn the application and framework of ASP.NET, otherwise you will get into trouble soon again.
Shibly Sadik11y ago
I am very new in asp.net mvc and don't know exactly what asp.net identity is.Would you please let me know the other functions please??
Afzaal Ahmad Zeeshan11y ago
If you are going to use the roles, then they are different than UserIDs. However, if you are going to use the UserID then they can be as simple as
```
if(user.UserId == 1001) {
    // Allowed user
}  else {
    // Not allowed
} 
```
Implement this function in your Action, and return the view as required. There are quite other different functions and procedures to be implemented, you forgot to mention how are you getting the User details? Are you using ASP.NET Identity?
Shibly Sadik11y ago
Suppose,i have a property named "UserId" in my model named "User".How can i set the "UserId" property as admin role and to allow access a controller or action only by the user who's "UserId" is like 1001??
Please help me explaining detail...
Afzaal Ahmad Zeeshan11y ago
All sort of authorization is (and should be) done in the controller not in the model. However you can still use the model for getting the UserID or other similar details for the user.

You can use the UserID and return appropriate response to the user from the action. Something like the following code,
```
public ActionResult YourAction () 
{
   if(authorized) 
   {
       ViewBag.Authorized = true; 
       return View(); 
   } else {
       ViewBag.Authorized = false;
       return View();
   }
} 
```
Then inside the view use this value, and show the message to the client. Showing a yellow screen of death is not the good option.