Dynamic role management ( by context ).
Same time we need dynamic role management ( by context ).
We can derive from SqlRoleProvider and override is methods.
Step 1: Build your role provider
public class MySqlRoleProvider : SqlRoleProvider
{
public override string[] GetRolesForUser( string username )
{
string[] result = base.GetRolesForUser( username );
// TODO: your implementation.......
// Example: <New Role Name>=”<Old Role Name>+<Context:Acount ID>”
return result;
}
// TODO: Override other methods
}
Step 2:Add the role provider to the config file <
roleManager enabled="true" defaultProvider="AspNetSqlRoleProvider"><
providers><
clear/><
add name="AspNetSqlRoleProvider" connectionStringName="DataBaseName" applicationName="/Demo1" type="MySqlRoleProvider" /></
providers></
roleManager> Step 3: Build Dynamic Role Permission Attribute
// Use the command line option '/keyfile' or appropriate project settings to sign this assembly.
[assembly: System.Security.
AllowPartiallyTrustedCallersAttribute()][AttributeUsage( AttributeTargets.Method | AttributeTargets.Constructor | AttributeTargets.Class | AttributeTargets.Struct | AttributeTargets.Assembly , AllowMultiple = true , Inherited = false )][
Serializable]public
class DynamicRolePermissionAttribute : CodeAccessSecurityAttribute{
SecurityAction action; string m_Role;
public DynamicRolePermissionAttribute( SecurityAction action )
: base( action )
{
this.action = action;
}
public override IPermission CreatePermission ()
{
PrincipalPermission p =
new PrincipalPermission( null , Role + “Context:Acount ID" );
return p;
}
public string Role
{
get{return m_Role;}
set{m_Role = value;}
}
}
Step 4: Declarative Secure Component
public
class DeclarativeSecureComponent{
[
PrincipalPermission( SecurityAction.Demand ,Role = "DistrictManagers" )]
public static void DistrictManagerMethod()
{
//TODO:
}
DynamicRolePermission( SecurityAction.Demand ,
[Role = "RegionalManagers" )]
public static void RegionalManagerMethod()
{
//TODO:
}
}
Step 5: Test the code…
<%
@ Page Language="C#" AutoEventWireup="true" %><!
DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><
html xmlns="http://www.w3.org/1999/xhtml" ><
head runat="server"> <title>Test my Role Provider</title> <script language="C#" runat="server"> protected void btnDistrictManager_Click( object sender , EventArgs e ){
DeclarativeSecureComponent.DistrictManagerMethod();lblResult.Text = "The user is District Manager";
}
protected void btnRegionalManager_Click( object sender , EventArgs e ){
DeclarativeSecureComponent.RegionalManagerMethod();lblResult.Text = "The user is Regional Manager";
}
</script>
</head>
<body>
<form id="form1" runat="server"><div> <asp:LoginName ID="LoginName1" runat="server" /> <asp:LoginStatus ID="LoginStatus1" runat="server" /><br /><br /> <asp:Button ID="btnDistrictManager" runat="server" OnClick="btnDistrictManager_Click" Text="District Manager" Width="155px" /><br /><br /> <asp:Button ID="btnRegionalManager" runat="server" OnClick="btnRegionalManager_Click" Text="Regional Manager" /><br />
<br /> <asp:Label ID="lblResult" runat="server" Height="135px" Width="514px"></asp:Label>
</div>
</form></
body></
html>