Roll base web-application

Question

I just want to know that how to make a role base web-application? There are different-diffrent users in my sytem like Admin Approver user etc. So how is it possible?

Soft Corner · Answer

Hi For role based forms authentication you need to create a database for the users which will store the user's password and their roles in the website. For example you might create a table named members with the userid password and roles as the fields in that table. While creating the roles you have to think over the types of roles that are required for your website and create accordingly. Once you create a table in a database the steps involved in achieving role based forms authentication would be: 1. Create the login page 2. In the click event of the login button write code for the following algorithm a. Initialize FormsAuthentication b. Create the connection and command objects c. Add parameters to the command object. d. Open the connection object e. Use the command object's ExecuteReader() method to execute the command. f. If no exception go to next step or else display error message and stop. g. Create a new ticket used for authentication h. Encrypt the cookie using the machine key for secure transport i. Set the cookie's expiration time to the tickets expiration time j. Add the cookie to the list for outgoing response k. Redirect to requested URL or homepage. 3. Modify the Application_AuthenticateRequest event handler in the Global.asax file to get the stored role value and generate a new principal. 4. Add the principal to the current context for the user so that you can retrieve the roles. 5. Modify the web.config file to control authorization. The above steps are performed to complete the role based authentication in ASP.Net. You should have organized your website content in folders based on user roles which makes it easy for you to grant permissions for the users to access those contents. A web.config file must be present in the root of the web applications directory for the role based forms authentication to function properly. It is possible to override the authorization in the web.config files in the sub-directories. A sample code for the web.config file in the root directory of the web application would look something like given below: loginUrl=login.aspx protection=All path=//> This web.config file can be split so that you can delete some block in the above code and have a separate web.config file for the sub-directories. In that case it is enough if you have only the     and elements in the web.config file in the sub-directory.

Soft Corner · Answer

Hi  take this rar file ..

Sahil Jani · Answer

I am new to this forums. I cant find out attached file. Let me know the place of that file.

Soft Corner · Answer

Hi  I have attached sample code in txt file .. look for that ... Let me know if you still have any problem :)

Sahil Jani · Answer

Thanks for giving this information. Actlly I understood almost all the things but one thing I have to ask is how to create a new ticket used for authentication. You have defined in your point no: g. Please let me know.