Specifying Roles in web.config of an asp.net MVC application

Question

I am creating an MVC application with forms auth. I am authenticating against active directory and so have created a custom RoleProvider. My application is only concerned with a small set of roles which up until now I have been defining in the appSettings section of my web.config:

<appSettings>
  <add key="DirectorRole" value="Domain\Directors" />
  <add key="ManagementRole" value="Domain\Managers" />
  ...
</appSettings>

However I have run into a couple of problems with this approach:

I cannot reference these setting in my contoller data annotations: [Authorize(Roles = ConfigurationManager.AppSettings["DirectorRole"])] as it wont compile so I have to specify the name of the group again: [Authorize(Roles = "Domain\\Directors")].
In my web.config, I would like to specify the groupsToUse for my role provider and just reference a pre-existing list, rather than maintain two seperate lists of the same set of roles.

It seems that there must be a better/reusable way to define the roles in the web.config, can someone point me in the right direction please?

Mohayemin · Accepted Answer · 2012-07-19 09:12:51Z

27

I would prefer using a custom authorize attribute. Like this one.

public class MyAuthorizeAttribute : AuthorizeAttribute {

    public MyAuthorizeAttribute(params string[] roleKeys) {
        List<string> roles = new List<string>(roleKeys.Length);

        //foreach(var roleKey in roleKeys) {
            //roles.Add(ConfigurationManager.AppSettings["DirectorRole"]);
        //}
        var allRoles = (NameValueCollection)ConfigurationManager.GetSection("roles");
        foreach(var roleKey in roleKeys) {
            roles.Add(allRoles[roleKey]);
        }

        this.Roles = string.Join(",", roles);
    }
}

In your controller, use:

[MyAuthorize("DirectorRole")]

In your web.config

  <configSections>
    <section
      name="roles"
      type="System.Configuration.NameValueFileSectionHandler,System, Version=1.0.3300.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
  </configSections>

  <roles>
    <add key="DirectorRole" value="Domain\Directors" />
    <add key="ManagementRole" value="Domain\Managers" />
  </roles>

I hope this will solve your first problem just fine. And twiking a little will solve the second one too.

edited Jul 19, 2012 at 9:12

answered Jul 18, 2012 at 11:35

Mohayemin

3,8704 gold badges29 silver badges55 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

James Over a year ago

Is there a specific place in the web.config to place a list of roles rather than just in the <appSettings> section?

Mohayemin Over a year ago

@james: I am not sure if there is any specific place. But you can certainly make a room for your roles. Have a look in here

Phil3992 Over a year ago

What is Role? this.Roles = string.Join(",", roles); is it a typo and meant to be role?

Mohayemin Over a year ago

@Phil3992: did it cause any compilation error? I guess Role is a property of AuthorizeAttribute.

Phil3992 Over a year ago

@Mohayemin Yeah for me Roles is not recognised. Even after adding system.web.mvc reference

|

Anand · Accepted Answer · 2012-07-18 10:56:55Z

0

Please have a look at this excellent example, in which author talks about the problem you are facing.

http://www.ryanmwright.com/2010/04/25/dynamic-controlleraction-authorization-in-asp-net-mvc/

answered Jul 18, 2012 at 10:56

Anand

15k8 gold badges35 silver badges44 bronze badges

Collectives™ on Stack Overflow

Specifying Roles in web.config of an asp.net MVC application

2 Answers 2

7 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

7 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related