ASP.Net Role based access

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Vikas Manghani - 27 Jul 2007 14:04 GMT

Hi
I have an intranet application which would be accessed by a small group of
users. I want to create a Windows group called 'MyAppUsers' and add all these
user accounts into that group. Next I want to enable access to the
application for this group and deny access to all other users.
I have tried the following in my web.config file:
<authorization>
<allow roles="Domain\MyAppUsers"/>
<deny users ="*" />
</authorization>
It is as recommended on a Microsoft support article but it doesnt work for
me. I am using ASP.Net 2.0 with IIS 5.1. Please correct me if I am wrong on
this one. I am sure this is a very common requirement.

Thanks in advance
Vikas Manghani

Reply to this Message

S. Justin Gengo - 27 Jul 2007 14:21 GMT

Vikas,

You may also need to change the default role provider. Check these other
settings in the web.config:

<authentication mode="Windows" />

<roleManager defaultProvider="WindowsProvider" enabled="true"
cacheRolesInCookie="false">
<providers>
<add name="WindowsProvider"
type="System.Web.Security.WindowsTokenRoleProvider"/>
</providers>
</roleManager>

Regards,

Signature

S. Justin Gengo, MCP
justin@aboutfortunate[-NoSpam-].com

Free code library at:
www.aboutfortunate.com

> Hi
> I have an intranet application which would be accessed by a small group of
[quoted text clipped - 14 lines]
> Thanks in advance
> Vikas Manghani

Reply to this Message

Vikas Manghani - 27 Jul 2007 14:44 GMT

Hi Justin
I tried that - but even though I have added myself as a user to the
MyAppUsers windows group, I am asked for my credentials. Even if I supply my
correct credentials, it does not allow me to access the application.

Thanks and regards
Vikas Manghani

> Vikas,
>
[quoted text clipped - 31 lines]
> > Thanks in advance
> > Vikas Manghani

Reply to this Message

ASP.Net Role based access

Free Magazines