I want to be able to have a couple of people with admin rights so that they can edit text fields and other things, but I don't want there to be a login button because there's no rights that I can give to "regular" users, so is there any way I can either secretly have a login or any other solution that I'm just not thinking of.. I'm using .NET with C# in code behind in case that's relevant.
2 回答
It depends... If you're on intranet, you can use other forms of authentication, for instance automatic windows/AD authentication. Also you can authenticate users based on their IP address, but that would require them to have public static IP, which is not always possible or desirable.
Here is what I have done sometimes if its a closed environment (like an application on an intranet).
On any page that needs special rights:
Have the code check a table for a list of allowed users (using their windows username from their currently logged in Windows Acct). I would do something like this in the page load: (pseudo code)
If NOT userallowed
Send message to the user that he is not allowed
Else
Do whatever code is required
the userallowed
function would just return a boolean if the windows id was in the table