Role based authentication?

Question

1.00/5 (4 votes)

See more:

am create a e-commerce website.
there are two type of user roll
1:-Admin Page
2:-User Login Pages
now I have a problem
when I login with user account and give admin pages link
user can access easily admin pages
how can I fixed this problem when user write admin page link then page going on its home page

What I have tried:

role based authentication for user or amdin

Posted 7-Mar-16 4:51am

Arslan saif

Updated 8-Mar-16 1:49am

v2

Add a Solution

Comments

debashishPaul 7-Mar-16 16:55pm

Are you using MVC or WebForm?

Arslan saif 8-Mar-16 4:32am

Webform

Philippe Mori 9-Mar-16 12:16pm

Tons of tutorial exists on the web...

2 solutions

Solution 2

It jump back to home page because the authorization is not allowed.

Have you ever using

C#

Microsoft.AspNet.Providers

okay , you know how to use ASP.NET Web Sites Administration Tool, right?

set a "Admins" roles right there, and assign that user to Admins roles.

?

then followed the same as i show you on top post.

then in login view, create a value "Admins" in "Edit Item" and switch it in rolegroup,
last add hyperlink to bring you to that pages.

ASP.NET

<asp:LoginView ID="LoginView1" runat="server">
<RoleGroups>
	<asp:RoleGroup Roles="Admins">
  		<ContentTemplate>
   			<asp:HyperLink ID="HyperLink1" NavigateUrl='<%# "~/Admins/ManageAdmin.aspx?id=123" %>' runat="server" Target="_blank" />
  		</ContentTemplate>
	</asp:RoleGroup>
</RoleGroups>
</asp:LoginView>

Posted 8-Mar-16 1:49am

koklimabc

Updated 8-Mar-16 2:02am

v7

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

koklimabc · Accepted Answer · 2016-03-07T15:28:00

Solution 1

Try create a sites in folder of "Admins", allows only roles admin access in web.config.

XML

<location path="Admins">
        <system.web>
            <authorization>
                <allow roles="Admin" />
                <deny users="*" />
            </authorization>
        </system.web>
    </location>

Posted 7-Mar-16 15:28pm

koklimabc

v2

Comments

Arslan saif 8-Mar-16 4:33am

can you explain this more