asp.net - Role based security in ASP.NET

Question

In my ASP.NET 3.5 application, on the ASPX pages I have to implement role based data update policy.

If a user have lest privilege, he can still update some filed but not all. Where user with maximum privilege can update all filed on page.

I was trying to implement this using a generic approach, but not sure if .NET have some thing inbuilt to implement this.

What is the right approach here?

Answer 1

是的，您会想要使用ASP.NET Membership。完成后，您可以检查用户的角色，如下所示：

if (Roles.IsUserInRole("User1", "Role1"))
    // allow whatever you need to

Answer 2

如果您使用的是 asp.net会员提供程序，您可以根据用户所处的角色来限制页面上的内容。