ASP.NET

26-Dec-08 19:49

Hi all,

I am developing a project in asp.net.
After the user login i want to provide authorization .

The resources/access rights are stored in sql server which maps to group/user .please suggest how do i proceed..

Authorization is required at the menus and also it must able protect the user from directly opening the pages by typing in the url.

Thxs in advance

Anand Desai26-Dec-08 20:01

Anand Desai

26-Dec-08 20:01

Hi,

tejesh123 wrote:
The resources/access rights are stored in sql server which maps to group/user

Create session variables each for every right (like bit 1 for authorized and 0 for not). After login check for those in database and according to that set the session variables.

tejesh123 wrote:
Authorization is required at the menus

Check for those variables while loading menu, if true then show link and otherwise.

tejesh123 wrote:
also it must able protect the user from directly opening the pages by typing in the url.

At !PostBack, check if session variables have values or not and at not, redirect to Home Page.

note: create all variables in one .cs page and render that whole page as Session (eg. SessionVariables sp = new SessionVariables(); sp = session["SessionVariables"]; where session["SessionVariables"] is created in previous page like session["SessionVariables"] = sp;)

Hope this helps!!!

Anand Desai
Developer
Atharva Infotech

tejesh12326-Dec-08 20:17

26-Dec-08 20:17

Still confused..

After i retrive the resources from sql server in string array,i need to copy it in session then i need to check whether the resources matches the arrtribute tag for the page..if yes provide the access if no otherwise
but how do i at menu level(Navigation) & if any alternate mechanism at the page level

Please provide a sample code

Anand Desai26-Dec-08 20:25

Anand Desai

26-Dec-08 20:25

Instead using .NET server control for menu, use JavaScript for menu creation. It will ease checking an also provide better design with explicit css than in-built tamplets.

Anand Desai
Developer
Atharva Infotech

tejesh12326-Dec-08 20:34

26-Dec-08 20:34

Hi thx for ur quick reply.

but i am still a newbie,Sample code can help me in resolving a problem

Waiting for reply

Abhijit Jana26-Dec-08 21:21

Abhijit Jana

26-Dec-08 21:21

You can do it just simple way . Create a Default page that will display the Unauthorized User message. When you click on the link to open the page that time just simple check the roll of user, if the roles permit to access that page , navigate to that page other wise redirect to unauthorized access page. On unauthorized access page give a link to user back to the home page.

<code>OnAdminLinkClicked()
  {
    if(Session["CurrentUserRole"].equals("Admin"))
       {
         Response.redirect("Admin.aspx");
        }
      else
         {
           Response.Redirect("Unauthorized.aspx)
          }
  }</code>

Note: Given code is just a dummy example, not compiled and checked !!!

cheers,
Abhijit

tejesh12326-Dec-08 21:54

26-Dec-08 21:54

thx for the reply

Well there may be more than 100+ users and more than 100+ access right and which are defined at the group level and some special at personal level..

Is it going to be optimistic solution for my problem..

Any custom methods which can be used across all the pages on the website.

Also please give a solution for menu security w/o using role based security provided by asp.net

tejesh12328-Dec-08 22:12

Re: check Email exist or not

28-Dec-08 22:12

Hi all,

I need to generate menubar ..
The menu bar must generate the menus based on user privileges stored in the database..

Please Help its urgent

check Email exist or not

kavitha_blueindia26-Dec-08 9:55

kavitha_blueindia

26-Dec-08 9:55

Hi all,

Is there any way to check whether Email exists not syntax wise.For eg:aaaaaaaaaaa@bbbbb.com. though it has valid syntax it doesn't exist in real.How to check this using asp.net code.Please help me.

Thanks.

Christian Graus26-Dec-08 10:42

Christian Graus

26-Dec-08 10:42

No, there isn't, not short of sending an email and seeing if it bounces, but that's not 100%, and it's user intrusive.

Christian Graus

Driven to the arms of OSX by Vista.

Re: check Email exist or not

Tamer Oz26-Dec-08 20:00

Tamer Oz

26-Dec-08 20:00

There is no 100% guranteed way but you can check mx records. Try the following code it may give an idea.

public class MailValidator
{
private bool mResult = false;
public bool Result
{
get { return mResult; }
set { mResult = value; }
}
private string mError = "";
public string Error
{
get { return mError; }
set { mError = value; }
}
private string mMailAddress = "";
public string MailAddress
{
get { return mMailAddress; }
set { mMailAddress = value; }
}
public MailValidator(string mailAddress)
{
mMailAddress = mailAddress;
}
public bool MailExists()
{
string domainName = mMailAddress.Substring(mMailAddress.IndexOf("@") + 1);
foreach (string str in Mx.GetMXRecords(domainName))
{
TcpClient insTcpClient=null;
try
{
//MessageBox.Show(str);
insTcpClient = new TcpClient(str, 25);
NetworkStream ns = insTcpClient.GetStream();

byte[] recievedMessage = new byte[insTcpClient.ReceiveBufferSize];
ns.Read(recievedMessage, 0, insTcpClient.ReceiveBufferSize);
//MessageBox.Show(Encoding.ASCII.GetString(recievedMessage));

string messageToSend = "HELO\r\n";
byte[] buffer = System.Text.Encoding.GetEncoding(1254).GetBytes(messageToSend);
ns.Write(buffer, 0, buffer.Length);

recievedMessage = new byte[insTcpClient.ReceiveBufferSize];
ns.Read(recievedMessage, 0, insTcpClient.ReceiveBufferSize);
//MessageBox.Show(Encoding.ASCII.GetString(recievedMessage));

messageToSend = "MAIL FROM:<deneme@" + domainName + ">\r\n";
buffer = System.Text.Encoding.GetEncoding(1254).GetBytes(messageToSend);
ns.Write(buffer, 0, buffer.Length);

recievedMessage = new byte[insTcpClient.ReceiveBufferSize];
ns.Read(recievedMessage, 0, insTcpClient.ReceiveBufferSize);
//MessageBox.Show(Encoding.ASCII.GetString(recievedMessage));

messageToSend = "RCPT TO:<" + mMailAddress + ">\r\n";
buffer = System.Text.Encoding.GetEncoding(1254).GetBytes(messageToSend);
ns.Write(buffer, 0, buffer.Length);

recievedMessage = new byte[insTcpClient.ReceiveBufferSize];
ns.Read(recievedMessage, 0, insTcpClient.ReceiveBufferSize);
//MessageBox.Show(Encoding.ASCII.GetString(recievedMessage));
if (Encoding.ASCII.GetString(recievedMessage).StartsWith("250"))
{
mResult = true;

}
insTcpClient.GetStream().Close();
insTcpClient.Close();
}
catch (Exception ex)
{
mError += str + ": " + ex.Message; ;
}
}
return mResult;
}
}
public class Mx
{
public Mx()
{
}
[DllImport("dnsapi", EntryPoint = "DnsQuery_W", CharSet = CharSet.Unicode, SetLastError = true, ExactSpelling = true)]
private static extern int DnsQuery([MarshalAs(UnmanagedType.VBByRefStr)]ref string pszName, QueryTypes wType, QueryOptions options, int aipServers, ref IntPtr ppQueryResults, int pReserved);

[DllImport("dnsapi", CharSet = CharSet.Auto, SetLastError = true)]
private static extern void DnsRecordListFree(IntPtr pRecordList, int FreeType);

public static string[] GetMXRecords(string domain)
{

IntPtr ptr1 = IntPtr.Zero;
IntPtr ptr2 = IntPtr.Zero;
MXRecord recMx;
if (Environment.OSVersion.Platform != PlatformID.Win32NT)
{
throw new NotSupportedException();
}
ArrayList list1 = new ArrayList();
int num1 = Mx.DnsQuery(ref domain, QueryTypes.DNS_TYPE_MX, QueryOptions.DNS_QUERY_BYPASS_CACHE, 0, ref ptr1, 0);
if (num1 != 0)
{
throw new Win32Exception(num1);
}
for (ptr2 = ptr1; !ptr2.Equals(IntPtr.Zero); ptr2 = recMx.pNext)
{
recMx = (MXRecord)Marshal.PtrToStructure(ptr2, typeof(MXRecord));
if (recMx.wType == 15)
{
string text1 = Marshal.PtrToStringAuto(recMx.pNameExchange);
list1.Add(text1);
}
}
Mx.DnsRecordListFree(ptr2, 0);
return (string[])list1.ToArray(typeof(string));
}

private enum QueryOptions
{
DNS_QUERY_ACCEPT_TRUNCATED_RESPONSE = 1,
DNS_QUERY_BYPASS_CACHE = 8,
DNS_QUERY_DONT_RESET_TTL_VALUES = 0x100000,
DNS_QUERY_NO_HOSTS_FILE = 0x40,
DNS_QUERY_NO_LOCAL_NAME = 0x20,
DNS_QUERY_NO_NETBT = 0x80,
DNS_QUERY_NO_RECURSION = 4,
DNS_QUERY_NO_WIRE_QUERY = 0x10,
DNS_QUERY_RESERVED = -16777216,
DNS_QUERY_RETURN_MESSAGE = 0x200,
DNS_QUERY_STANDARD = 0,
DNS_QUERY_TREAT_AS_FQDN = 0x1000,
DNS_QUERY_USE_TCP_ONLY = 2,
DNS_QUERY_WIRE_ONLY = 0x100
}

private enum QueryTypes
{
DNS_TYPE_MX = 15
}

[StructLayout(LayoutKind.Sequential)]
private struct MXRecord
{
public IntPtr pNext;
public string pName;
public short wType;
public short wDataLength;
public int flags;
public int dwTtl;
public int dwReserved;
public IntPtr pNameExchange;
public short wPreference;
public short Pad;
}
}

Webservice to validate Email address

David Mujica29-Dec-08 9:44

David Mujica

29-Dec-08 9:44

Check this site out ...

http://www.webservicex.net/WCF/ServiceDetails.aspx?SID=22[^]

I played around with it and it seemed to work very well. I don't know how they validate the email address, but it seems to work.

I've also played around with their stock-quote webservice, which works very nicely.

Give it a shot.

Gridview control Problem

amistry_petlad26-Dec-08 4:21

amistry_petlad

26-Dec-08 4:21

Hi all!
I am creating a grid view control containing data and column coming from two different sources .

1)first two columns in grid control coming from 1 source with all the data like field_name1 and field_name2.

2) second having the 1 column(Table Field) in the table which is display as columns header text in the grid view control combin with the above grid view.

Now the problem.
All the time the 2) is appear first i want to show him in 2nd priority.
1) shoud be display first.

below is the code for that

<br />
if (chkHealthPlanDP.Checked)<br />
        {<br />
            //grdByHealthPlanDP.Visible = true;            <br />
            System.Web.UI.WebControls.GridView DiseaseGrid = new GridView();<br />
            <br />
            DiseaseGrid.DataSource = REPORT_METRIC_ENTITYMIX.GetData(2); //data coming from source one <br />
            DiseaseGrid.DataBind();    <br />
            DiseaseGrid.Width = 100;<br />
            DiseaseGrid.Height = 50;<br />
            DiseaseGrid.GridLines = GridLines.Both;<br />
            DiseaseGrid.CellPadding = 0;<br />
            DiseaseGrid.HeaderStyle.BackColor = System.Drawing.Color.Pink;            <br />
                        <br />
            foreach (Master_ref_disease masterDisease in Master_reference_disease.result() //source 2)<br />
            {<br />
                BoundField c = new BoundField();<br />
                c.HeaderText = masterDisease.D_ID;<br />
                //c.DataField = masterDisease.D_ID;                <br />
                DiseaseGrid.Columns.Add(c);                <br />
            }<br />
            PlaceHolder1.Controls.Add(DiseaseGrid);<br />
           DiseaseGrid.DataBind();              <br />
        }<br />

Re: Gridview control Problem

Nishant Singh26-Dec-08 20:44

Nishant Singh

26-Dec-08 20:44

Why not take a Child Grid for showing records of dataSource 2

Problem in running web page

Girish48126-Dec-08 0:00

Girish481

26-Dec-08 0:00

I have created a web application. It is running fine if i gives http://localhost/web1/default.aspx; but if i check through http://192.168.0.12/web1/default.aspx; it is returning me error
You are not authorized to view this page
HTTP 401.3 - Access denied by ACL on resource.

192.168.0.12 is the IP address of my web server.

Please let me know how to resolve the issue.

Thanks & Regards
Girish Sharma

Brij26-Dec-08 0:05

Brij

26-Dec-08 0:05

Girish481 wrote:
i check through http:///web/default.aspx

why you use this?If you want ot remove the locaklhost then you have to give the IP instead of locahost.

Cheers!!
Brij

Girish48126-Dec-08 0:08

Girish481

26-Dec-08 0:08

Because i wish that this should be accessible through another machine.

Brij26-Dec-08 0:14

Brij

26-Dec-08 0:14

whether you have deployed it on IIS or not? if yes, check it from there only,then check whether its working?and one more thing, Enable anonymous access.

Cheers!!
Brij