C# current.principal

Question

In a current C# 2008 application the current logic determines if a user has access to certain roles by using the following kind of check: IPrincipal ip = Thread.CurrentPrincipal; bool isInRole = ip.IsInRole(managers); Now my company is going to use several different domains. For the logic I listed above would I need to use logic like if (ip.IsInRole(domainname1/managers) || ip.IsInRole(domainname2/managers) || ip.IsInRole(domainname3/managers)) can I use logic that does not require the domain name or do you have a suggestion on what I can try? Thus can you show me in code or tell me how to accomplish my goal?

Vulpes · Answer

If your roles are going to be prefixed with domain names and you want to know whether a user is in a specific role in any domain then it will make life easier if you write a custom method to check this and also (optionally) to return the domain the user is in: static bool IsInRoleInAnyDomain(IPrincipal ip string role out string domain) { string[] domains = {domainname1 domainname2 domainname3}; foreach(string d in domains) { string domainRole = String.Format({0}/{1} d role); if (ip.IsInRole(domainRole)) { domain = d; return true; } } domain = null; return false; } You can then call this method with code such as the following: string domain; IPrincipal ip = Thread.CurrentPrincipal; string role = managers; if (IsInRoleInAnyDomain(ip role out domain)) { // do something }