将asp.net标识与地理授权一起使用

Question

I used Asp.net Identity in an enterprise web application (mvc) with role and group based permissions management. Now I have to add a new entity as geography to divided users in different provinces or regions to authorized users access. I mean every user can fetch his/her province or region data in pages. Is there a best practice for this purpose? Or can any one guide me about this subject?

thanks.

Update: I have a simple design in my mind like this .(I could not attached the image here.)

Answer 1

The way that users are distinct to regions is base on their IP address. So you read their IP and then base on this IP you attach him with a country/region.

Now there are some free and commercial databases that gives you this connection Ip with region and here is how to do it from some other answer:

geolocating an IP address

Answer 2

If i had to implement this i would add categories to users and regional data: Example:

• user Peter Smith, Category: NorthGermany
• user Susan Brown, Category: NorthGermany,SouthGermany
• regional data: Store Hamburg, Category NorthGermany
• regional data: Store Munich, Category SouthGermany

The user is only allowed to see those regional data where he or she has categories for.

Peter can see the hamburg store while susan can see hamburg and munich

Answer 3

I've developed a claims based security framework for covering all my needs in security layer as user, group and claim manager with row level security also. I could cover geo authorize with rls concept in my project. You can find it in GitHub to check the source and use it.