I am writing a web application to replace the one we are currently using. I have finished most of the application and now need to integrate the authorization and administration into the mvc views and controllers. I understand how to use the "authorize" attribute on controllers to hide views and use "is authorized" in views to show different content based on roles and users. What I need help with is the authorization setup and in app management. The app we currently use is set up so that admin can enter the "domain\username" of an employee and assign them an authorization level (I assume a custom role). This allows us to issue assignments to the users so that they only see their assignments. I am unsure if this done through windows authentication in an intranet application, or forms authentication in a web application. If its not windows authentication and custom roles, how do I tie-in the domain accounts to a forms authorization? If it is windows, how do I go about setting up the controller for a management view so I don't have to manually add users to the controller. I am fairly new to mvc and just started looking into authorization, so this may be a very simple topic to explain, but my google-fu has failed me on this one. Would appreciate any help, even just a good tutorial, as all I have found so far is on how to control access, not set up administration. Thanks
↧