How do you restrict certain HTML elements to certain roles using ASP.NET MVC?

Question

I'm looking for the standard practice in specifying that a certain HTML element, like a "Create user" button should only be displayed when the user is logged-in and belongs to the role "Administrator."

For example, using Spring MVC in Java, the Spring Security tag library has a control that does just that:

<sec:authorize access="hasRole('ROLE_PRESIDENT')">
    <input type="button" value="Launch nuclear weapons"/>
</sec:authorize>

Whatever appears between the tags will only display when the user belongs to the role specified.

Does ASP.NET MVC have such feature?

Jon · Accepted Answer · 2011-11-22 05:14:39Z

5

For Razor view engine:

@if (User.IsInRole("ROLE_PRESIDENT")) {
    <input type="button" value="launch nuclear weapons" />
}

For Webforms view engine:

<% if (User.IsInRole("ROLE_PRESIDENT")) { %>
    <input type="button" value="launch nuclear weapons" />
<% } %>

answered Nov 22, 2011 at 5:14

Jon

16.8k8 gold badges54 silver badges62 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

rick schott · Accepted Answer · 2011-11-22 05:20:14Z

3

If you need element level security across your site, I suggest you create custom HtmlHelpers per element that all implement your security rules for rendering.

Note: wrapping if statements with role checks all over your views will not be maintainable

answered Nov 22, 2011 at 5:20

rick schott

21.1k5 gold badges54 silver badges81 bronze badges

2 Comments

Jon Over a year ago

agreed, it seems to be the closest equivalent to the Spring MVC code in the question (not that I know Spring MVC) though

Scifiballer24 Over a year ago

Do you mean the HtmlHelper should check whether the user is authorized to complete the action? It should then decide whether to render an HTML object or not, I assume?

Ashok Padmanabhan · Accepted Answer · 2011-11-22 05:15:34Z

0

@If User.IsInRole("Administrator") Then 'whatever end if

something like should work

answered Nov 22, 2011 at 5:15

Ashok Padmanabhan

2,1201 gold badge19 silver badges36 bronze badges

Collectives™ on Stack Overflow

How do you restrict certain HTML elements to certain roles using ASP.NET MVC?

3 Answers 3

Comments

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related