Users Role in Winform program?

Question

2.50/5 (2 votes)

See more:

I have created a program which has to work with database.As a database i am using SQL Server 2008.

This program will use 10 users and one admin.It will record work of this 10 users.

in this program i have 10 menuStrip items each of them has the same name table in database. when you will click on menuStrip item,it will open own form and user can register his work which he or she done. Each user will have his own job.

So what i am trying to do is, to make for users to see just related menuStrip items visible,the rest of it not. And only admin will be able to see all 10 menuStrip items.i have created login form and when user will sign in,in the mainWindow will be shown the username in the label "User".
if labelUser=admin then the button which is opening AdminPanel is visible otherwise not.

And on that AdminPanel you can see the list of users in dataGridView1 and name of tables in dataGridView2 which is same to menuStrip items.In the middle of AdminPanel there is a groupBox with two textBoxes and under them 3 checkBoxes which is specifying for user to "Read" or "Read & Edit" or "invisible".

When admin will click save it will be saved in the table "PriveleBox" in database.

Finally my question is :) is it possible to make when user in login form will press Sign in button first program go through the “PrivelegBox” table and by that it will make window appeareance for user.For example menustripItem[1]=visible the rest are not or few items visible and the rest not?

Posted 6-Jan-15 2:50am

Rustam777

Updated 7-Jan-15 2:33am

v3

Add a Solution

Comments

BillWoodruff 6-Jan-15 9:02am

This is a single-instance Application running on a server with multiple users, and one admin at a given time ? Or ... ?

More detail on how you are managing the log-in, ui-configuration, now, would be useful.

Are you implementing your own version of username/password entry, log-in validation, and Groups/Roles/Privileges ?

Your UI spec seems very complete; are you having any trouble implementing it ?

"when you will click on menuStrip item,it will open own form and user can register his work which he or she done. Each user will have his own job."

Have you considered using UserControls instead of separate Forms for each User ?

Rustam777 6-Jan-15 23:01pm

It seems to me only you understood my question) it is a single Application which is running on a server with multiple users and with one admin at a given time. Yes I am implementing my own login form and it works fine but i dont know how to connect menustripItems to tables and when user in login form will write his username with password and when he will click on Sign in button, program must first check PriveleBox table in database because there will be record for that user which menuStripItems are visible or not visible or just readOnly and by that must show main window.

BillWoodruff 7-Jan-15 14:13pm

I have written a WinForm app in the past that simulated the kind of UI you are talking about, but I think that it is so far from being useful to you that it's not worth writing at length about. There were no real security constraints in that app.

The strategy I used was a simple linkage of current User to their "view (a UserControl) via a Dictionary<ToolStripItem,UserControl> : when the user selected a different view by clicking a MenuItem, I used a Dictionary look-up to retrieve the associated view (UserControl) and made it visible, brought it to the front of the z-order, etc.

In my app, I had the Admin UserControl, and individual-user UserControls, all inherit from a common UserControl base. Doing that requires a few tricks when/if you need to make sure Controls on the common base are removed from other UserControls that inherit.

For your app, it occurs to me that if each "normal user" has a running version of the App that includes the special UI for the Admin ... even though that's "hidden away" and supposedly blocked by security restrictions ... that's dangerous. I would guess you would want to have a log-in process first, and then when user-status is clear, you'd load your main-app and load assemblies that embodied either an Admin or User view.

ZurdoDev 6-Jan-15 10:17am

Of course it's possible since you are in control of the code. Where exactly are you stuck then?

Rustam777 6-Jan-15 23:55pm

thank u. I am actually not stuck in code, all codes works fine, i just want to make for users some menuStrip items visible and some not. By writing condition if(username_label=="user"){then menustripItem[1].visible=true or false and so on...for each user} For now i have this solution but i want to make it when user will click Sign in button in login form program first will go to database and will check in the table PrivelegeBox which items must be visible and editable or invisible or just readable.

ZurdoDev 7-Jan-15 7:31am

You're telling me what you want to do but aren't asking a question.

Rustam777 7-Jan-15 8:28am

My question is, when user will click Sign in button in login form program first must go to database and must check in the table PrivelegeBox which menuStripitems must be visible and editable or just readable or invisible ?
if u have any example how to implement that i would appreciate that.

ZurdoDev 7-Jan-15 8:33am

It's up to you how your program works. I guess I still don't understand what you are asking from us.

Rustam777 7-Jan-15 8:35am

hm do u have skype?

ZurdoDev 7-Jan-15 8:36am

No, sorry. You can use the google helpouts button to the right to try and connect with someone though.

Again, though, it's up to you if you make it visible and disabled or invisible. That's your decision.

BillWoodruff 7-Jan-15 14:54pm

Still unclear to me is what MenuItems are visible for each User; seems clear the Admin sees all the 10 possible User MenuItems, but the individual User sees ... ? ... no other Users on the Menu, just utility Menu entries common to all ?

Sergey Alexandrovich Kryukov 6-Jan-15 11:58am

I would call it "functionally not a question". Of course it is possible, so what? What kind of help would you need, why? Please start here: What have you tried so far?
—SA

BillWoodruff 6-Jan-15 12:08pm

In my opinion, there are several possible questions in this post; the gist of it being questions of "how to." Quite legitimate for this forum, and, take into account this person is kind of newcomer here; this is their third question in the last several months.

Sergey Alexandrovich Kryukov 6-Jan-15 12:10pm

I agree, but still, as formulated, it is not yet an answerable question. "What kind of help would you need" and "What have you tried so far" is one of the ways to move it into something constructive.
"How to" can always be dubbed "legitimate", but not always suitable for answering; you saw many examples.
—SA

BillWoodruff 6-Jan-15 14:18pm

Rather than obsess about "legalities," I would rather try to assist the OP to formulate their question by asking open-ended questions. I do not share your penchant for the drama of "Crime and Punishment," although that is one magnificent novel !

Sergey Alexandrovich Kryukov 6-Jan-15 16:49pm

Who is obsessed about "legalities"? Please pay attention that you were the first one who mentioned "legitimate", and then I mentioned the same only in connection with your post. Bill, please look at this carefully and try to observe such cases when you exaggerate some words written by others, add your own and, to certain extent, try to put your words in someone's mouth. Your advice is often reasonable, you often say many correct words, but in response to what? I can see that you have good fantasy, but how much fantasy one may have to see "the drama of Crime and Punishment" in all that? :-)
Dostoevsky himself, by the way, wrote enough about such things, too. Read "Demons", for example. (No, I'm not saying you are one of them and consciously manipulate, but if feels like that; I'm sure you are guided by the best motives.)

Remember you have written about not being "sucked in"? It was a good idea. Instead, you could give those suggestions about asking good questions yourself, clarify something to me, and so on. After all, read my post where did you start this talking again and think how much all you reproaches are relevant.

—SA

Rustam777 6-Jan-15 23:03pm

Сережа может из за моего английского вы не поняли; я могу и на русском написать.
SA, perhaps you did not understand me because my English; I can write in Russian for you.

Sergey Alexandrovich Kryukov 7-Jan-15 2:06am

No, no. First of all, it would be unfair to write in the language not everyone here can understand. (One short phrase cannot be a problem.) So, I edited and translated your phrase; hope you won't mind it. If you want to write me personally, you can do it; only I won't promise anything.

The problem is not English; despite some language problem, nearly everything can be understood. Anyway, for giving help, it is not required to understand each and every aspect, but it can be more important to figure out what problem gives you hard time and what kind advice or information could be helpful. In your case, this is unclear. You need to develop some data-driven technique, in particular, data-driven UI. From my point of view, this is just the work to be done, not a problem. I cannot see what prevents you from developing such thing.

One thing which is not clear is: why the log-on part of the UI should be different? Look at the usual log-on UI: the user enters username and password. As before authentication the role of the user is unknown, there is no information which would make the view different. Am I missing something?

One advice on the roles: don't create hard-coded roles. The logic of the application dictates the set of permissions. You should not make any assumptions on what are the roles; which sub-set of all possible permissions should be set for each role, and no assumption even on the number of roles (by the way, number of users, too). In other words, the administrator (or any user already having this permission) should be able to add any new role and set permissions for it, just be adding data to the database. If you think that I advise it without knowing your requirements, thing again: I say so because 1) the customers tend to know their organizational structure better and dislike getting forced in such decisions by software designers/developers; 2) roles tend to change with time, as well as organizational structure.

That's all for now. I would really prefer posting official answer instead of these comments, but I really need to understand what to help with.

—SA

Rustam777 7-Jan-15 0:05am

PrivelegeBox table has this columns:
id | username | tableNames| ReadOnly | Read&Edit | Invisible
1 user1 plantLayout false true false
2 user1 Drawings false false true
3 user1 QIC true false false
4 user2 plantLayout true false false
5 user2 Drawings false false true
3 user2 QIC false false true

and so on...

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)