Dropdown values according to rights

Question

0.00/5 (No votes)

See more:

dropdown values according to rightsI have form.aspx in that there is dropdown

ASP.NET

<asp:Label ID="Label3" runat="server" Text="Select values"></asp:Label>
   <asp:DropDownList ID="regiondrop" runat="server" AutoPostBack="True"
   onselectedindexchanged="regiondrop_SelectedIndexChanged">
   </asp:DropDownList>

   <asp:RequiredFieldValidator controltovalidate="regiondrop" ID="RequiredFieldValidator1" runat="server" ErrorMessage="Select Region">
   </asp:RequiredFieldValidator>

What I have tried:

There is mutlilpe values in that drodown ..

C#

e.g.
   Car
   Truck
   Bike
   Drink
   Factory

There is another login page Login.aspx .
Login code

C#

protected void Button1_Click(object sender, EventArgs e)
       {
           try
           {
               //Label1.BackColor = "F8D8D7";
               loginmethod(txt_us.Text, txt_pwd.Text);

               Response.Redirect("WebForm1.aspx");
           }
           catch( Exception )
           {
               Label1.Text = ("Incorrect UserName/Password");
               Label1.Visible = true;
           }
           txt_us.Text = "";
           txt_pwd.Text = "";


       }
       public bool  loginmethod(string UserName,string Password)
       {
           TrackDataEntities1 td = new TrackDataEntities1();

          splogin1_Result sp = td.splogin1(UserName, Password).FirstOrDefault();
          if(sp.Password==txt_pwd.Text)
          {
              return true;
          }
          else
          {
              return false;
          }



       }

Now there is two users .. admin and user . Now i want when admin login then with their id and password then he see some values from this list and when user login then he will see some values from this list for example when admin login then he may able to see only Factory value and when user login then he able to see all values except factory

how i do this ?

Posted 24-Aug-16 19:42pm

super_user

Add a Solution

Comments

F-ES Sitecore 25-Aug-16 5:06am

If (userisadmin)
{
regiondrop.DataSource = adminListOfData;
}
else
{
regiondrop.DataSource = nonAdminListOfData;
}

This is fairly straightforward.

super_user 25-Aug-16 5:53am

but dropdown list control is in form.aspx and login code is in login.aspx.. . there is several values in dropdown which i fetch from database and fill in dropdown using linq query ..

F-ES Sitecore 25-Aug-16 5:57am

You need a mechanism that lets your site know at a global level if the user is logged, and maybe also what their role is. This is usually done using the Session. So after they log in set something like

Session["UserID"] = userID;

you could use the username if that's all you have. Other pages can then check if Session["UserID"] is populated, and if it is work out the users role\rights from their login info.

super_user 25-Aug-16 6:05am

yes i know that but the problem is all values are in one table and i use this query for filling drodown

var list = tea.tblReg.AsEnumerable()
.Where(x => !x.Region.Any(char.IsDigit) && (x.Region != ""))
.GroupBy(x => x.Region)
.Select(x => new { Region = x.Key, Value = x.Key })
.ToList();

if (!Page.IsPostBack)
{
regiondrop.DataSource = list;
regiondrop.DataTextField = "Region";
regiondrop.DataValueField = "Region";
regiondrop.DataBind();

Label4.Visible = false;

}

F-ES Sitecore 25-Aug-16 6:10am

You need some way of knowing which fields are to be used for admin and non-admin. Maybe have an extra field on your Region table that says if the field is valid for admin users or not, and then you include that in the Where.

super_user 25-Aug-16 6:15am

ok how i sepcify that when admin login then show these values otherwise when user login then show these values .. how i configure my dropdown linq query or sp login..
ALTER procedure [dbo].[splogin]
@UserName nvarchar(50),
@Password nvarchar(50)
as
select UserName , Password from tbllogin
where
UserName=@UserName and Password=@Password

F-ES Sitecore 25-Aug-16 6:23am

var list = tea.tblReg.AsEnumerable()
.Where(x => !x.Region.Any(char.IsDigit) && (x.Region != "") && x.IsAdminField == userIsAdmin)

super_user 25-Aug-16 6:33am

in login.aspx i save username is session

Session["UserName"] = txt_us.Text;
in form.aspx

Here first i create sp

ALTER procedure [dbo].[spadminlist]
as
select Region from tblReg
where Region in ('Factory')
then i add this sp in form.aspx

//this linq query for selecting all values

var list = tea.tblReg.AsEnumerable()
.Where(x => !x.Region.Any(char.IsDigit) && (x.Region != ""))
.GroupBy(x => x.Region)
.Select(x => new { Region = x.Key, Value = x.Key })
.ToList();
//this is for admin

if (Session["UserName"] = "admin")
{
List <spadminlistresult> admin = tea.spadminlist().ToList();
}
and filling dropdown

if (!Page.IsPostBack)
{
regiondrop.DataSource = list;
regiondrop.DataTextField = "Region";
regiondrop.DataValueField = "Region";
regiondrop.DataBind();

Label4.Visible = false;

}
but this show error and also how i fill dropdown with admin sp because there is queries

Error 3 Cannot implicitly convert type 'object' to 'bool'. An explicit conversion exists (are you missing a cast?)
how i do this ?

F-ES Sitecore 25-Aug-16 6:40am

you'll need something like

// note the double "==", one "=" is for assignment and two is to compare
if (Session["UserName"] == "admin")
{
regiondrop.DataSource = tea.spadminlist().ToList();
}
else
{
var list = tea.tblReg.AsEnumerable ....
regiondrop.DataSource = list;
}

super_user 25-Aug-16 6:52am

ok i try this ..

if (!Page.IsPostBack)
{
if (Session["UserName"] == "admin")
{
regiondrop.DataSource = tea.spadminlist().ToList();
regiondrop.DataTextField = "Region";
regiondrop.DataValueField = "Region";
regiondrop.DataBind();
Label4.Visible = false;

}
else
{
var list = tea.tblReg.AsEnumerable()
.Where(x => !x.Region.Any(char.IsDigit) && (x.Region != ""))
.GroupBy(x => x.Region)
.Select(x => new { Region = x.Key, Value = x.Key })
.ToList();
regiondrop.DataSource = list;
regiondrop.DataTextField = "Region";
regiondrop.DataValueField = "Region";
regiondrop.DataBind();
Label4.Visible = false;
}

}

this show warning.. Warning 3 Possible unintended reference comparison; to get a value comparison, cast the left hand side to type 'string'

F-ES Sitecore 25-Aug-16 7:51am

On what line? If it is the session comparison it may need

if ((Session["UserName"] as string) == "admin")

or

if (Session["UserName"] != null && (string)Session["UserName"] == "admin")

super_user 25-Aug-16 8:05am

thanku now working when i try this

super_user 25-Aug-16 6:06am

but how to select specific values for admin and user

Richard Deeming 25-Aug-16 8:54am

Looks like you're storing passwords in plain text. That's an extremely bad idea.

You should only ever store a salted hash of the user's password, using a unique salt per record.

Secure Password Authentication Explained Simply[^]
Salted Password Hashing - Doing it Right[^]

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)