How to make user authorized access in asp.net mvc 5?

create Roles , there are atleast 4 ways to achieve it , the simplest one is to use Role provider

[Authorize(Roles = "Administrator, PowerUser")]
public class ControlPanelController : Controller
{
public ActionResult SetTime()
{
}
[Authorize(Roles = "Administrator")]
public ActionResult ShutDown()
{
}
}
public class CustomRoleProvider : RoleProvider
{
public CustomRoleProvider(){ }
public override bool IsUserInRole(string username, string roleName)
{
List<string> roles = Users.GetRoles(username);
return roles.Count != 0 && roles.Contains(roleName);
}
public override string[] GetRolesForUser(string username)
{
List<string> roles = Users.GetRoles(username);
return roles.ToArray();
}
#region Not Implemented Methods
public override void AddUsersToRoles(string[] usernames, string[] roleNames)
{
throw new NotImplementedException();
}
public override string ApplicationName
{
get
{
throw new NotImplementedException();
}
set
{
throw new NotImplementedException();
}
}
public override void CreateRole(string roleName)
{
throw new NotImplementedException();
}
public override bool DeleteRole(string roleName, bool throwOnPopulatedRole)
{
throw new NotImplementedException();
}
public override string[] FindUsersInRole(string roleName, string usernameToMatch)
{
throw new NotImplementedException();
}
public override string[] GetAllRoles()
{
throw new NotImplementedException();
}
public override string[] GetUsersInRole(string roleName)
{
throw new NotImplementedException();
}
public override void RemoveUsersFromRoles(string[] usernames, string[] roleNames)
{
throw new NotImplementedException();
}
public override bool RoleExists(string roleName)
{
throw new NotImplementedException();
}
#endregion
}
//under system.web in web.config
"true" defaultProvider="CustomRoleProvider" enabled="true">
"CustomRoleProvider" type="[Namespace here].CustomRoleProvider, [Application Assembly here]" />

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Sachin Singh5y ago
create Roles , there are atleast 4 ways to achieve it , the simplest one is to use Role provider
[Authorize(Roles = "Administrator, PowerUser")]
public class ControlPanelController : Controller
{
    public ActionResult SetTime()
    {
    }

    [Authorize(Roles = "Administrator")]
    public ActionResult ShutDown()
    {
    }
}


public class CustomRoleProvider : RoleProvider
{
    public CustomRoleProvider(){ }

    public override bool IsUserInRole(string username, string roleName)
    {
        List<string> roles = Users.GetRoles(username);
        return roles.Count != 0 && roles.Contains(roleName);
    }

    public override string[] GetRolesForUser(string username)
    {
        List<string> roles = Users.GetRoles(username);
        return roles.ToArray();
    }

    #region Not Implemented Methods

    public override void AddUsersToRoles(string[] usernames, string[] roleNames)
    {
        throw new NotImplementedException();
    }

    public override string ApplicationName
    {
        get
        {
            throw new NotImplementedException();
        }
        set
        {
            throw new NotImplementedException();
        }
    }

    public override void CreateRole(string roleName)
    {
        throw new NotImplementedException();
    }

    public override bool DeleteRole(string roleName, bool throwOnPopulatedRole)
    {
        throw new NotImplementedException();
    }

    public override string[] FindUsersInRole(string roleName, string usernameToMatch)
    {
        throw new NotImplementedException();
    }

    public override string[] GetAllRoles()
    {
        throw new NotImplementedException();
    }

    public override string[] GetUsersInRole(string roleName)
    {
        throw new NotImplementedException();
    }

    public override void RemoveUsersFromRoles(string[] usernames, string[] roleNames)
    {
        throw new NotImplementedException();
    }

    public override bool RoleExists(string roleName)
    {
        throw new NotImplementedException();
    }

    #endregion
}



//under system.web in web.config
"true" defaultProvider="CustomRoleProvider" enabled="true">


    "CustomRoleProvider" type="[Namespace here].CustomRoleProvider, [Application Assembly here]" />