Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

SiteMap With Roles in ASP.Net 4.0 Web Application not working with Roles

$
0
0

Hi all,

I have web application using Oracle DB i used membership with it and roles but when i tried to use sitemap with roles to allow user to display menu according to role not working with me

In Web.Config i add this code :

<system.web><customErrors mode="Off"/><compilation debug="true" targetFramework="4.0" /><authorization><deny users="?"/></authorization><authentication mode="Forms"><forms loginUrl="~/Account/Login.aspx" timeout="2880" /></authentication><profile defaultProvider="DefaultProfileProvider"><providers><clear /><add name="DefaultProfileProvider" type="System.Web.Providers.DefaultProfileProvider, System.Web.Providers, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" connectionStringName="DefaultConnection" applicationName="/" /></providers></profile><membership defaultProvider="DefalutMembershipProvider"><providers><clear /><add connectionStringName="DBConnection" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" applicationName="OnlineSite" name="DefalutMembershipProvider" type="Oracle.Web.Security.OracleMembershipProvider, Oracle.Web,Version=2.111.7.0, Culture=neutral, PublicKeyToken=89b483f429c47342" /></providers></membership><roleManager enabled="true" defaultProvider="DefaultRoleProvider" cacheRolesInCookie="false"><providers><clear /><add connectionStringName="DBConnection" applicationName="BackOfficeSite" name="DefaultRoleProvider" type="Oracle.Web.Security.OracleRoleProvider, Oracle.Web,Version=2.111.7.0, Culture=neutral, PublicKeyToken=89b483f429c47342" /></providers></roleManager><!-- For SiteMap Provider --><siteMap defaultProvider="AspNetXmlSiteMapProvider" enabled="true"><providers><clear /><add name="AspNetXmlSiteMapProvider"
          description="Default SiteMap provider"
          type="System.Web.XmlSiteMapProvider"
          siteMapFile="~/Web.sitemap"
          securityTrimmingEnabled="true"  /></providers></siteMap><sessionState mode="InProc" customProvider="DefaultSessionProvider"><providers><clear /><add name="DefaultSessionProvider" type="Oracle.Web.Security.OracleMembershipProvider, Oracle.Web,Version=2.111.7.0, Culture=neutral, PublicKeyToken=89b483f429c47342" connectionStringName="DefaultConnection" /></providers></sessionState><pages><controls><add assembly="AjaxControlToolkit" namespace="AjaxControlToolkit" tagPrefix="asp" /></controls></pages><httpHandlers></httpHandlers><httpRuntime executionTimeout="1800" maxRequestLength="100000" /></system.web>

and in siteMap i add this

<?xml version="1.0" encoding="utf-8" ?><siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" ><siteMapNode  url="~/Default.aspx" title="Home" roles="*"><siteMapNode url="~/Inbox/Inbox.aspx" title="Home Page"  description="" roles="Register,Reviewer" /><siteMapNode url="~/" title="Pages"  description=""  roles="EntityRegister" ><siteMapNode url="~/RegisterAppointment.aspx?Code=MQAAAA==" description="" title="Page1" roles="Register"/><siteMapNode url="~/RegisterAppointment.aspx?Code=MgAAAA==" description="" title="Page2" roles="Register"/><siteMapNode url="~/RegisterAppointment.aspx?Code=MwAAAA==" description="" title="Page3" roles="Register"/></siteMapNode></siteMapNode></siteMap>

In MasterPage i add menu with sitemapdatasource

<asp:SiteMapDataSource ID="SiteMapDataSource1" runat="server" 
        ShowStartingNode="False" /><asp:Menu ID="mainMenu" runat="server" Orientation="Horizontal" DataSourceID="SiteMapDataSource1"></asp:Menu>

When i login with user not in Roles Register or Reviewer menu appears even user in those roles or not

can you please help me

I'm using VS2012 with Oracle DB

Thank you




Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>