user authorisation ?

Subin Thomas

6y1.1k.NET

in my application if any user logs in he/she can access any page by enerting the page name in url,

i want to ristrict specific user from accessing page by typing in the url.

in "allow user" what have to be passed i have userid stored in session in every page, so can i put session value in allow user ?

3 Replies

Know the answer? Post it — somebody with the same question will find it here.

Subin Thomas6y ago
puneet i saw all the link but i want to know where the user has been declared
from the eg you gave how it know who is jhon and tito ?
Puneet Kankar6y ago
Hi Subin,

Check below links for restricting every user to a specific link.

https://weblogs.asp.net/gurusarkar/setting-authorization-rules-for-a-particular-page-or-folder-in-web-config

https://docs.microsoft.com/en-us/aspnet/web-forms/overview/older-versions-security/membership/user-based-authorization-cs

https://www.aspsnippets.com/Articles/Implement-Role-based-security-Page-access-and-ShowHide-Menu-items-based-on-Role-in-ASPNet.aspx

https://www.youtube.com/watch?v=AoRWKBbc6QI
<location path="CreatingUserAccounts.aspx">
<system.web>
<authorization>
<allow users="Tito,Jhon" />
<deny users="*" />
authorization>
system.web>
location>
Rajanikant Hawaldar6y ago
Hi Subin Thomus check this
https://forums.asp.net/t/1988185.aspx?What+is+the+meaning+of+deny+users+allow+user
https://stackoverflow.com/questions/831994/why-is-deny-users-included-in-the-following-example