ASP.NET User.IsInRole 说明

Question

I need to implement authorisation based on Active Directory group. Could someone please clarify how the code below works?

User.IsInRole("Human Resouces")

Question:

1. Is role "Human Resources" checked against Active directory group?
2. If not, how do I enable so that isInRole actually checks the Member Group in Active directory.
3. Or does it check against role on IIS Server machine?

Thank you.

Answer 1

This requires some setup, check out these following resources:

http://msdn.microsoft.com/en-us/library/ms180890(v=vs.80).aspx http://msdn.microsoft.com/en-us/library/ff650308.aspx

If you follow the approach of defining a principal that sets the principal to the User property, you can use User.IsInRole to check the AD authorization store. The User (an IPrincipal) represents the information from the authentication mode setting (either forms or windows); AD is typically setup through forms authentication.

HTH.

Answer 2

I think you should look at this MSDN post it explain the things as your requirements are.
How To: Use Windows Authentication in ASP.NET 2.0