MVC User Multi-Level Hierarchy and Dynamic Role Assignment

Question

I am new to MVC, but I have a good experience in C# Winforms, Database Designing and normalization. I want to define a User and his roles dynamically, using MVC.

Detailed Description

There is an Organization with the Head Of Department(HOD). There are several branch offices and each office have a Branch Head Officer Working under HOD. Each Branch Officer has a power to Assign Different Accessibility to his employees. For Eg: A Cashier can also have an access to Generate Bills.

My Problems are:

HOD(Admin) Will Create A Branch Officer(BO).HOD Will Have Access To all the defined Actions in All the controller.
How BO Can create a User that can have access only to the "Controllers's Actions" defined by the BO , and What If the Second Level User Want to create another third level user
BO and his descendants will have access only to their Branch Office. They cannot see Any details of another Branch, but HOD can view any detail of any Branch. (I want this Authorization at Server Side to avoid Cross Site Scripts)

Please guide Me, How Can I Implement This Model of Multi Access Level And Dynamic Role Management?

I have searched a lot but Couldn't found anything that can help me. BTW This Project is Employee Management System that includes Payroll, Leave Management, Employee Service Book etc. Thanks in advance.

Which MVC Version are you developing this in? The simplest solution i can think of is to use weblogs.asp.net/jongalloway/… a role based authentication and decorate your controller's or actions with Authorize attribute . e.g. [Authorize(Roles="HOD,BO")] — Hasta Tamang
– Hasta Tamang, Commented Jan 2, 2016 at 20:43
I think this link is the one you want.Follow the steps and i think you wont be far off but post specific question's where you get stuck. dotnetcurry.com/aspnet-mvc/1102/aspnet-mvc-role-based-security . — Hasta Tamang
– Hasta Tamang, Commented Jan 2, 2016 at 22:37

Hasta Tamang · Accepted Answer · 2016-01-02 23:06:44Z

1

Just for guidance not to be take as a 100% solution.

If you are using MVC 5 you can use ASP.NET Identity Core

There are two common authorization approaches that are based on Role and Claim.

This is role based authentication. So basically you create roles as per your requirement, then you assign those roles to users. So the user immediately gets all the access rights defined for that role.

In your database:

You will have a list of users in AspNetUsers table

List of Roles in AspNetRoles table --> Admin, Branch Manager, Manager etc

Then finally decorate your controller or action with [Authorize(Roles="Admin, etc")]

[Authorize(Roles = "Admin")]
public ActionResult TestMethod()
{
    ViewBag.Message = "This View is designed for the Admin's";
    return View();
}

Or Whole Controller

[Authorize(Roles = "Admin")]
    public class TestController 
    {

    }

So once those are in place you will have a create an action where the admin can assign roles to others. Branch Officer can assign roles to employees.

Useful link: http://www.dotnetcurry.com/aspnet-mvc/1102/aspnet-mvc-role-based-security http://www.asp.net/identity/overview/getting-started/introduction-to-aspnet-identity

edited Jan 2, 2016 at 23:06

answered Jan 2, 2016 at 22:58

Hasta Tamang

2,2981 gold badge20 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

user3204126 Over a year ago

First of all thanks for the Guidance,I had an idea of authorize attribute but I am not sure if it will work dynamically.I'll implement this Attribute in my controller as per your guidance and will update If it solves my problem. Thanks again!!

Collectives™ on Stack Overflow

MVC User Multi-Level Hierarchy and Dynamic Role Assignment

Detailed Description

My Problems are:

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

Detailed Description

My Problems are:

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related