像PHP的ACL蛋糕PHP

Question

I am looking for ACL based security. I have found Cake php's ACL very suitable for my project. Does anyone know any similar framework for asp.net mvc.

Thanks in advance

Answer 1

The Cake PHP ACL system looks quite powerful. However, I'm not aware of a hierarchical system available out-of-the-box for ASP.Net MVC.

The standard means to control access to resources (eg controllers) is via Roll Based Security .

You can always check if the current user is in a given role, eg

bool isInSomeRole = HttpContext.Current.User.IsInRole("SomeRole");

The AuthorizeAttribute simplifies such checks for controller actions:

[Authorize(Roles = "Customer")]
public ActionResult Index()
{
    ViewBag.Message = "Dashboard";

    return View();
}

Finally, here's a must-read article if you want to thoroughly understand MVC security

http://blogs.msdn.com/b/rickandy/archive/2012/03/23/securing-your-asp-net-mvc-4-app-and-the-new-allowanonymous-attribute.aspx