[02/03] access according to group rights

[puresmile]

i'm using sql server 2000 In my application; i'm getting group rights from database and access to a particular web page would be given according to that rights.

i think; it should be implemented in page loadup but have no idea. I've following intentions

1. when a user login the application; it should be directed according to the userGroup he belongs like if he is an admin then he would be directed to Admin home page; similarly; if he is an ordinary user then he would be directed to his particular page.

can you give me a code example for it?

[puresmile]

no help?

[mendhak]

This isn't a matter of code, just a matter of logic.

Have a table, say groupstartpage which contains information like

Group   StartPage
1         admin.aspx
2         home.aspx
3         mendhak.aspx

So when a user logs in, in addition with whatever information you retrieve from the database, along with the usergroup, redirect them to the page name you just retrieved.

[puresmile]

This isn't a matter of code, just a matter of logic.

Have a table, say groupstartpage which contains information like

Group   StartPage
1         admin.aspx
2         home.aspx
3         mendhak.aspx

So when a user logs in, in addition with whatever information you retrieve from the database, along with the usergroup, redirect them to the page name you just retrieved.

here is my Global.asax.vb part but i'm unable to get user's role from this (or u can say don't know how to get user's role through this file as we get userName by "User.Identity.Name". can i get user's role from here or should i use explicitly defined function to get the user's role (this function is already defined in customPrincipal's file).

Protected Sub Application_AuthenticateRequest(ByVal sender As Object, ByVal e As EventArgs) Handles MyBase.AuthenticateRequest
        Dim userInformation As String = [String].Empty
 
        If Request.IsAuthenticated = True Then
            ' Create the roles cookie if it doesn't exist yet for this session.
 
            If Request.Cookies(Globals.UserRoles) Is Nothing OrElse Request.Cookies(Globals.UserRoles).Value = "" Then
                ' Retrieve the user's role and ID information and add it to
                ' the cookie
                Dim user As Users = Users.GetUserByUsername(Context.User.Identity.Name)
               
            ' Create a string to persist the role and user id
            userInformation = user.Id & ";" & user.Username & ";" & user.GroupId & ";" & user.BranchId
            ' Create a cookie authentication ticket.
            Dim ticket As New FormsAuthenticationTicket(1, Context.User.Identity.Name, DateTime.Now, DateTime.Now.AddHours(1), False, userInformation)
            ' version
            ' user name
            ' issue time
            ' expires every hour
            ' don't persist cookie
 
            ' Encrypt the ticket
            Dim cookieStr As [String] = FormsAuthentication.Encrypt(ticket)
 
            ' Send the cookie to the client
            Response.Cookies(Globals.UserRoles).Value = cookieStr
            Response.Cookies(Globals.UserRoles).Path = "/"
            Response.Cookies(Globals.UserRoles).Expires = DateTime.Now.AddMinutes(1)
 
            ' Add our own custom principal to the request containing the user's identity, the user id, and
            ' the user's role
            Context.User = New CustomPrincipal(Context.User.Identity, user.Id, user.GroupId, user.Username, user.BranchId)
        Else
            ' Get roles from roles cookie
            Dim ticket As FormsAuthenticationTicket = FormsAuthentication.Decrypt(Context.Request.Cookies(Globals.UserRoles).Value)
            userInformation = ticket.UserData
 
            ' Add our own custom principal to the request containing the user's identity, the user id, branch id and
            ' the user's role from the auth ticket
            Dim info As String() = userInformation.Split(New Char() {";"c})
            Context.User = New CustomPrincipal(user.Identity, Convert.ToInt32(info(0).ToString()), info(1).ToString(), info(2).ToString(), info(3).ToString)
        End If
        End If
    End Sub 'Application_AuthenticateRequest

[puresmile]

any idea??