Authorized users access, ASP.NET MVC

Question

I have rows with different guids in my database table:

public class News
{
    public int NewsId { get; set; }
    public string title { get; set; }
    public string description { get; set; }
    public int guid { get; set; }
}

And I want to create groups of users, that will be able to view news with a certain guid. I am using ASP.NET MVC template with users authentication, but I can't understand how should I approach my goal? I can register users, I read about roles and filters, but it didn't help.

[Authorize]
public ActionResult GetNews()
{
 // GET USER GUID AND RETRIEVE NEWS WITH THIS GUID??
}

Should I somehow search how to retrieve user's id in controller method, than make query to database and get users group to filter news list or there is solution more easy?

Also, in Django I was able to control users from prebuild admin panel, has ASP.NET MVC similar thing, or I should make my own controller for this? I need somehow add users to groups/(give them roles) if I want to filtering content for different users.

I need a direction what to do, I read about AuthenticationFilter, ActionFilterAttribute and other filters and looks like it can't help me. I am sure ASP.NET MVC should have some technology to make it easy , I just don't know what is it — Panich Maxim
– Panich Maxim, Commented Oct 1, 2015 at 18:44
Have you tried looking into properties of your controller? The one called User, perchance? — Sergei Rogovtcev
– Sergei Rogovtcev, Commented Oct 1, 2015 at 20:04

user3313994 · Accepted Answer · 2015-11-24 10:41:59Z

1

Use User property of ur controller.

answered Nov 24, 2015 at 10:41

user3313994

Sign up to request clarification or add additional context in comments.

Comments

IndieTech Solutions · Accepted Answer · 2015-10-01 18:51:37Z

0

There couple of ways to achieve that, here's my version. the GetNews() method should only be responsible of getting the new news and return an Actionresult . the logic of checking the user ID or anything else should not be managed inside this method SOLID

As for controlling who should have access to the GetNews() , you can benefit from the authentication logic already implemented in your app. the attribute [Authorize] will only give access to authenticated users to use your method. try to add a role based logic as well, by extending the functionality . something like [Authorize(Roles = "NewsMembers")]

BONUS

sample code to add a role :

 private void AddRole(String roleName)
        {
            var roleManager = new RoleManager<IdentityRole>(new RoleStore<IdentityRole>(new ApplicationDbContext()));
            var role = new IdentityRole();
            role.Name = roleName;
            roleManager.Create(role);
        }

Sample code to add role to a user

public void addRoleToUser(string UserId,string roleName)
        {
            var context = new ApplicationDbContext();
            var userStore = new UserStore<ApplicationUser>(context);
            var userManager = new UserManager<ApplicationUser>(userStore);
            userManager.AddToRole(UserId,roleName);
            userManager.Dispose();
            userStore.Dispose();
        }

edited Oct 1, 2015 at 18:51

answered Oct 1, 2015 at 18:45

IndieTech Solutions

2,5391 gold badge23 silver badges37 bronze badges

1 Comment

NightOwl888 Over a year ago

It seems the GetNews() method implementation you promised is missing from your answer.

Collectives™ on Stack Overflow

Authorized users access, ASP.NET MVC

2 Answers 2

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related