Edit Question - KnowledgeHub

Title Body

I recently starded developing for MVC 3 but have experience in both C# and ASP.NET since earlier. So i'll start with what i'm trying to accomplish. I've developed a small site for hosting articles. I've implemented SQLServer based membership managament to the site. Now i want to create a credentials system that restricts and allows the right users to create, delete and update articles. There is one simple solution to this and that is to do it like this: [Authorize(Roles="Admin")] public ActionResult UpdateArticle(ArticleModel model, int articleid) { return View(); } Now this is really simple. I simply say that only members that are in the role "Admin" are allowed to update an article. But that's just to static. So i created a credentials table in my database that in the end tells me that "Article 5 can be edited by roles 1,2,3 & 4 and by users A, b & C". So far so good. But how would i implement that with the Authorize solution? I would like to do something like this: [Authorize(getAuthorizedusers("update",this.articleid))] where getAuthorizedusers returns which users and roles are authorized to update the article with the articleid that was passed to it. So I have (at least) two problems here: -Getting the Authorize method to accept multiple users and roles. -Passing the supplied articleid, that was sent to the UpdateArticle method, to the getAuthorizedusers method.

Tags (comma-separated) Cancel