Handling User Permissions by Linking Membership tables to Application Tables

Question

0.00/5 (No votes)

See more:

I have a simple ASP.NET MVC 3 application. I have the database I designed for the application, which corresponds to a domain model (in an App.Domain assembly).
I auto-generated the Application Services Membership tables and added them to the application database. Membership creation is working fine.
I created a 'Permission' table which has a composite PK made up of UserId (from the auto-generated aspnet_Users table) and ContentId (from the Content table holding the application content).
The idea is to allow users to allocate permissions to other users for the content they create.
My plan is to then place logic in the Controllers that goes something like:

C#

Guid currentUser = (Guid)Membership.GetUser().ProviderUserKey;
int[] accessible = (from p in context.Permissions
                             where p.UserId == currentUser
                             select p.ContentId).toArray();

Then to get the content for the current user, something like this:

C#

IEnumerable<content> content = context.Content
                .Where(x => x.PublicAccess < 3 || accessible.Contains(x.ContentId));</content>

If I have made any sense, can anyone tell me if this is a normal way to handle user defined permissions.
Also, this code doesn't work because it won't cast the linq to an int[]. Any help with that?

Posted 13-Nov-11 1:17am

david006

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

GateKeeper22 · Answer 1 · 2011-12-02T06:53:00

I think that is an acceptable way to handle what you are trying to do. Try using a list instead of an array it may fix your problem. See example code below.

C#

List<int> accessible = (from p in context.Permissions
                             where p.UserId == currentUser
                             select p.ContentId).toList();</int>