Check A Users Role Before They Are Routed To A Web Forms Page With ASP.net 4.0
Feb 7, 2012
I have an asp.net web forms application that uses asp.net membership and URL Routing.Because of the way Roles work, i cant put an "AND" or "OR", etc. in the allow/deny tags of the web.config file that resides in each folder.This is a business website that that is being ported from a vb.net win forms project that contianed many apps. (The win forms project have a custom authentication system.)The web app is structured in a way to mimic the desktop suites and a folder was created for each app.There are also common folders where any user of any app can generate a report.
I currently have some security working in my application by using the roles and rules, but i wondered whether it was possible to hide web links depending on if a user belongs to a certain role.I currently have it so users belong to either the 'admin' role or 'user' role. Rules have been setup on folders in my application so if a user belongs to either of the groups they can click on a web link and it takes them to the page. However, if a new user registers they belong to no role, and when they click on the web link it redirects them to the homepage (see code below). This is great, but, i wondered is it possible to hide that web link if the user did not belong to a specific role preventing them click on it. Also if a user belonged to no role could they be redirected to a page to tell them they need a role assigned?
I dont use this in the current application but have in the past, this checks if the user has been authenticated, i wondered whether i could use a similar IF statement for:If user.identity does not belong to 'user' or 'admin' role, then redirect them to page and display error?
If User.Identity.IsAuthenticated = True Then Dim myUser As MembershipUser Dim objUser As Object[code].....
I currently have it so users belong to either the 'admin' role or 'user' role. Rules have been setup on folders in my application so if a user belongs to either of the groups they can click on a web link and it takes them to the page. However, if a new user registers they belong to no role, and when they click on the web link it redirects them to the homepage (see code below). This is great, but, i wondered is it possible to hide that web link if the user did not belong to a specific role preventing them click on it. Also if a user belonged to no role could they be redirected to a page to tell them they need a role assigned?
I'm trying to use a splash screen to check the logged on users rights and if all meets criteria it loads the default form. Currently in my load event of the spash form i had some code along the lines
I have an ASP.NET application on our company's intranet. And a funky security requirement.
I need to check to see if a given username is in a certain role. I cannot use
Page.User.IsInRole("MyDomainMyGroup")
because
Page.User.Identity.Name
Returns an empty string. Because of some lovely specifications for this program, I have to keep anonymous access enabled in IIS. Seems to rule out any page.user.identity stuff.
So I did find a way to (at least) get the current user (from System.Environment.UserName), but I need to bounce it against the domain group to see if they're in it. Or, better yet, get a list of users within a given domain so I can check myself. Something like...
Dim UserName as String UserName = System.Environment.UserName If User(UserName).IsInRole("MyDomainMyGroup") Then
In my VS solution, I have two projects.One for the Web Interface, other for DataAcess and BusinessLogic. I know I can check if the currently logged-on user is Employee in Web Interface project like this from the code behind:
Dim isEmployee = User.IsInRole("Employee")
The problem is that I have a Class call UserManagement in my the DA and BL project which I want to check the currently logged-on user role also. I can't use Dim isEmployee = User.IsInRole("Employee") because it doesn't have aspx page.
What do I need to do to check the user role in my custom class?
I am trying to check all the checkboxes on a webform (aspx) page, which is inside a master page,depending on the ID of the checkbox. The checkboxes are created dynamically, so I only know the prefix for finding it. So, I need to find these checkboxes by iterating the controls on the page somehow. It's not working out.
I am new to .NET and I have created a login page, with a user Id and password. In my webconfig, I put the following code in to deny users who are not authenticated. <authentication mode="Forms"> <forms loginUrl="Login.aspx" timeout="10" protection="All" /> </authentication> <authorization> <deny users="?"></deny> </authorization>
What I am trying to accomplish is that when a user enters the correct information, I would like to store information small information about the user in a cookie, say for example if there an admin, manager, user, etc...Here is the code that occurs when the user click the submit button. The problem is that the page doesn't redirect to the page after user enter correct information. If txtPassword.Text.ToLower = "test" Then 'Create a cookie Dim cookie As New HttpCookie("UserInfo") 'Cookie variables cookie("User") = txtUser.Text [Code] .....
Scenario: We have a website that is viewed both internally and externally. When an error occurs the users are displayed with a detailed error page(Stack trace etc). Problem: The external customers do not need that much information about the error. We are looking to have the external customers see a message instead. Ex. Please contact Administrator. Also if possible we would like to log this message in our SQL database.
Note: I'm assuming I make a custom error page like - Implementing a Custom Error page on an ASP.Net website. but how do I determine whether or not the user is internal/external? Also is this the best way to approach the problem?
I have a site where users must only be able to access the Login.aspx page via SSL/HTTPS.Currently I run something like the following in my Page_Load():
If Not (IsSSL) Then Response.Redirect("https://" + thisDomainName + "/Login.aspx") End If
i have a program where the high scores will be saved in a txt file. of course, if the file is already in use, saving the text file won't work. is there an if statement i can do to check if it is in use? or could i check the last access time, and the last modify time and if the modify time happened after the access, i know its closed, and if the access time happened after the last modify time it is still in use?
I have a vb application sitting on sql 2005 database i want a scenario where the application can check the number of records inserted into a particular table(Users) , if the number of records inserted into that table after 1wk since the last insert is less than 100 records it should pop up a warning alert with the total number of records
I am currently creating an application to track timekeeping (a clock in/out system) and I am trying to work out the best way to do this.
I have a Main Form which contains buttons to ;
- Log in - Out for Break - In from Break - Log out
When a user presses the "log in" button the logon form appears, the user then enters their username and password. What happens next is where I would like the help.
Process is as follows:Click Logon Enter Username/Password Check Logon Form for errors (eg no password etc) Check User is in Database (using SQL query) If user is in DB and username and pass are ok then refer back to the main form to perform Stored Procedure for what the user wants to do (eg logon or or out for break etc). Set label on main form to show user as logged on My question is should I be using a public variable and calling the main form again or in the user logon form having 4 options and using an IF ELSE to select the appropriate Stored Procedure?
Im trying to make a program which would check for users from text file on a certain website I can populate the list box, and loop through it's items here is the code i came up with so far and it doesnt work properly, it pops out first item in the listbox, and last item only, even though that they shouldnt be popped out
Private Sub WebBrowser1_DocumentCompleted(ByVal sender As System.Object, ByVal e As System.Windows.Forms.WebBrowserDocumentCompletedEventArgs) Handles WebBrowser1.DocumentCompleted If Not ListBox1.Items.Count < 2 Then
[code].....
(this is supposed to check every user, and if user doesnt exist, website will return page not found, else user exists and his name is added to listbox2)
i wanna create an app which can take information and make notepad file of that data. Users can make any number of notepad files they want. The prbolem: i want to show all the users files in combo box whic i did it. but i don't know how to make that file show when user clicks on that name . here is the code of mine.
I am creating a form in vb.net and i want its size to change the form as soon as the user inputs the desired number of items. In my form I have two combo boxes: one for number of items and the second is for the choices, then when the user choose 5 items 5 text boxes will appear and if the choice is 25 then 25 text boxes will appear. Is there any way that I can change the form based on the input and number of text boxes?
I am trying to make a form that can be used to allow users select file(s) from one control and drag them to another. I am stuck. I have done a bunch of research and now have a form that allows the user to select a directory and display the files in a listbox. It works intermittently. The select directory window works when I click the Browse button and it reports that it found a number of files. But they are not in the listbox. When I walk thought the code in DeBug the files are listed.
i want to implements users control. i have the same informations in a group box in a lot of forms. i would like to insert the same group box in all my forms.how would i do?
I want to create a Class Library that has forms to that the users can perform some functionality. Is that possible in VS 2008? I believe it is, but can't find any examples out their to provide a template or a guide to create mine. What I am trying to do is put common functionality in a class library to multiple applications that I create can access this class library to perform some functionality.
I have my main form which will have the option to hide itself and open up a mini version. I would like this mini version to start at the top-right of the users screen.I have went through other posts and understand that you can set distance from top-left.
I am trying to check the title of a Previous Page to see if it matches the page title "JobDetails". If it does not then some code (MyCode) runs. The following code is failing to identify the title correctly even when the previous page title = "JobDetails".
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load Dim objPage As Page = Page.PreviousPage Dim sTitle As String = ""
