Question

I’m following this tutorial link

I have a table users {iduser, user, pass, role}

I’m using this users : string[] users = db.users.Select(t => t.user).ToArray();

instead of : string[] users = Users.Split(','); Is it ok ?

My problem is with roles : SiteRoles role = (SiteRoles)httpContext.Session["role"];

Q: Where do I store the role for my user ?

My simplified account controller:

    [HttpPost]
    public ActionResult Login(LoginModel model)
    {
        HeliosEntities db = new HeliosEntities();       
        if (ModelState.IsValid)
        {
            bool userok = db.users.Any(t => t.user == model.UserName && t.pass == model.Password);
            if (userok == true) 
            {
                FormsAuthentication.SetAuthCookie(model.UserName, model.RememberMe);
                return RedirectToAction("Index", "Home");
            }
            {
                ModelState.AddModelError("", "Incorect password or user!");
            }
        }

        return View();
    }

Answer 1

A quick look at your link above shows that it is getting the user’s role from session:

(SiteRoles)httpContext.Session["role"];

so you need to set the session value when the user logs in, for example:

var userRole = Roles.Admin | Roles.User;
httpContext.Session["role"] = role;

I don’t know where you store the information about what role the user is in though.