如何为某些用户配置文件ASP.NET提供删除授权

Question

I want to give permission to certain user profiles (ie Administrators, Managers which I already have it in DB) to delete certain records in DB if they press the delete button in my ASP.NET web application page. Can someone help me on this? Or provide me useful resources.

Answer 1

There are many options to handle user roles. One of them is forms authentication . It makes role management very easy and you won't have to spend much time on it once you get it set up. More info here .

If you wanted to set up your own role management system, you could just add a column to your Users table called Role and set visibility of controls based on the value of Role .

If it were me, I would add a class called CurrentUser having the properties from your Users table (including Role ). Your Insert() , Update() , and Delete() methods might then look something like this:

if (CurrentUser.Role == "Admin" || CurrentUser.Role == "Manager")
{
    // Allow insert, update, or delete to process
}