Home/ Questions/Q 7949125
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-04T01:54:21+00:00

I currently have a Web Application which is using it’s own Permissions table which

  • 0

I currently have a Web Application which is using it’s own “Permissions” table which contains the following columns:

  • UserName – Windows UserName (Context.User.Identity.Name)
  • DivisionID – Links to a Division Table
  • RoleID – Comes from a custom Roles Table
  • RegionID – Recently added field to divide my Application into Countries (Canada, USA, International)

When the User logs into the site, they choose which Region they want to enter and I need to give them access to those Regions based on if they have any permissions set for that specific RegionID. Upon selecting a Region, the RegionID is stored in Session and will be used for this permission check and defining how data is populated on the pages (I haven’t implemented the Session variable into all of the pages just yet so that can be changed if need be)

My initial thought would be to run my Permission Check on each page sending them to one of three destinations:

  • Invalid Permission Page (false)
  • Region Select Page – No Region selected in Session (RegionID = 0)
  • The page they requested – If has a permission set for that Region

I’ve also looked into using the Application_AuthenticateRequest method within the Global.asax but I cannot use Session within this area and it seems to be hitting the Application_AuthenticateRequest much more than it should be.

With my current App, what would be the best way to authenticate each user with their corresponding Regions, based on their Permissions?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I’ve really only worked with forms authentication– but I’m assuming you’ll be using windows authentication for membership and some form of custom roles authentication. I’ve never done it, but one would think it should work.

    http://msdn.microsoft.com/en-us/library/system.web.security.roleprovider.getrolesforuser

    You could create a custom provider that would take into account the Session value for Region in order to return the correct roles. I know for a web application, the default provider stores the roles as an encrypted cookie on the client. I’m thinking you can do something similar.

    • 0