Question

I need to develop a custom RoleProvider for a MultiTenant web app.
At the DB level, we have a table that relates Users with Roles with Tenants.

My problem is that RoleProvider gets user roles just passing the User as parameter, and we need to take the Tenant into account.

In RoleProvider implementation we have:

public override string[] GetRolesForUser(string username)
{
    //Code to retrieve roles from repo
}

As the roles are for a user in an specific Tenant, we need:

public override string[] GetRolesForUser(string username, int tenantId)
{
    //Code to retrieve roles from repo
}

The current tenant is stored in the ControllerBase class (the one that all controllers inhereted from).

The Membership and Role Providers are in a separate project, so I don’t see a way to use the current Tenant. I think I could create my custom RoleProvider in the web app project.

Any idea on how to implement the RoleProvider interface taking the Tenant as part of the input ?

Answer 1

Well, just to inform you what I did in my case:

As our routes are in the form of http://[tenantName].[domain]/[App]/[Area] we ended up getting the [tenantName] from the Request, since it is unique, and with the Tenant and the UserName that came as a parameter I can do my select on our UsersInTenants' table.

The very same can be done using cookies as a way to pass aditional information.

So you can access the request, with the cookies, but for what I research the Session is not yet initialized in most cases.

Hope it helps!