c# - Authorization based on assigned Permission function -


i have 3 tables dbo.permissionfunc, dbo.roles, dbo.permissions asp.net mvc web application.

dbo.permissionfunc contains function name in project. dbo.roles contains user roles such admin, user, subuser etc dbo.permissions contains rolesid dbo.roles , permissionfuncid dbo.permissionfunc. want give authorization based on value assigned in dbo.permission.

image shows assigning permission role

update in question: query using determine if current user has permission or not

        string mail = formsauthentication.decrypt(request.cookies[formsauthentication.formscookiename].value).name;         var usr = _user.getuserbymail(mail);         var permfunc = _permissionfunc.findbyname("actionresultname");         var permission = _permission.checkifpermitted(convert.toint64(usr.usr_role_id), permfunc.permfunc_id);//usr.usr_role_id roleid , permfunc.permfunc_id permissionfunctionid         if(permission != null)         {               //permission granted         }         else         {              //permission rejected         } 

thanks in advance

you can create custom authorizationattribute logic of checking roles , permissions in , use operations requires that.

you can use mvc.filters implementation of iauthorizationfilter, filter every request. register in filterconfig

filters.add(new myauthorizationattribute()); 

Comments

Popular posts from this blog

angular - Ionic slides - dynamically add slides before and after -

minify - Minimizing css files -

Add a dynamic header in angular 2 http provider -