Authorize specific user from database

Question

I want to prevent access my action methods from all users except one.How can i authorize a specific user from my database model?? help please....

Afzaal Ahmad Zeeshan · Answer

ASP.NET Identity is the authentication system in ASP.NET. You need to first learn the application and framework of ASP.NET otherwise you will get into trouble soon again.

Shibly Sadik · Answer

I am very new in asp.net mvc and don't know exactly what asp.net identity is.Would you please let me know the other functions please??

Afzaal Ahmad Zeeshan · Answer

If you are going to use the roles then they are different than UserIDs. However if you are going to use the UserID then they can be as simple as if(user.UserId == 1001) { // Allowed user } else { // Not allowed } Implement this function in your Action and return the view as required. There are quite other different functions and procedures to be implemented you forgot to mention how are you getting the User details? Are you using ASP.NET Identity ?

Shibly Sadik · Answer

Supposei have a property named UserId in my model named User.How can i set the UserId property as admin role and to allow access a controller or action only by the user who's UserId is like 1001?? Please help me explaining detail...

Afzaal Ahmad Zeeshan · Answer

All sort of authorization is ( and should be ) done in the controller not in the model. However you can still use the model for getting the UserID or other similar details for the user. You can use the UserID and return appropriate response to the user from the action. Something like the following code public ActionResult YourAction () { if(authorized) { ViewBag.Authorized = true; return View(); } else { ViewBag.Authorized = false; return View(); } } Then inside the view use this value and show the message to the client. Showing a yellow screen of death is not the good option.