Click here to Skip to main content
15,884,836 members
Articles / Web Development / ASP.NET

Forms Authentication and Role based Authorization: A Quicker, Simpler, and Correct Approach

Rate me:
Please Sign up or sign in to vote.
4.78/5 (120 votes)
3 Dec 2009CPOL11 min read 377.6K   12.5K   368  
This article describes a correct and smarter way of implementing Role based authorization with Forms authentication in ASP.NET.
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.Security;

public partial class Login : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }

    protected void btnLogin_Click(object sender, EventArgs e)
    {
        Authenticate(txtUser.Text, txtPassword.Text);
    }

    /// <summary>
    /// Authenticates user and redirects to the originally request page is authentication
    /// is successful
    /// </summary>
    /// <param name="userName"></param>
    /// <param name="password"></param>
    private void Authenticate(string userName, string password)
    {
        string commaSeperatedRoles = string.Empty;

        //Authenticate user against the user database and obtain comma seperated roles
        if (!UserAuthentication.Instance.AuthenticateUser(txtUser.Text, txtPassword.Text, out commaSeperatedRoles))
        {
            lblLoginFailed.Visible = true;
            return;
        }

        //Instead of FormsAuthentication.RedirectFromLoginPage(txtUser.Text, false);
        //Use the following code
        FormsAuthenticationUtil.RedirectFromLoginPage(txtUser.Text, commaSeperatedRoles, true);
  
    }

    
}

By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.

If a file you wish to view isn't highlighted, and is a text file (not binary), please let us know and we'll add colourisation support for it.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


Written By
Founder SmartAspects
Bangladesh Bangladesh
I write codes to make life easier, and that pretty much describes me.

Comments and Discussions