Authorization frameworks for HTML?

Question

I have an MVC website with RazorView, where I have hundreds of html elements. I wanted to enable or disable some fields,allow or deny edit on some text fields ..etc.. Is there any javascript framework that I can use? Or what is the best approach to implement element level authorization? Thanks in advance.

Answer 1

Even if you check permissions on client side (Javascript), you have to validate it on server site. Otherwise, it could be possible to manipulate a request and fill fields where you don't have permissions.

So I can't advise a framework which matches your question, but make sure you proof data on server side also - no matter what you're using on client side.

Thus, a solution might be to hide fields (serverside template) where a user has no permission.