Comments on: Custom Authorization With Asp.net MVC http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/ All Things .Net and Me Wed, 14 Dec 2011 23:12:03 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Stephen http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-508 Stephen Wed, 14 Dec 2011 23:12:03 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-508 WOW! Thank you so much for this article. This helped me SO much! WOW! Thank you so much for this article. This helped me SO much!

]]> By: How do I assign a Role to an OpenId user for an ASP.NET MVC site? http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-463 How do I assign a Role to an OpenId user for an ASP.NET MVC site? Sat, 01 Oct 2011 23:15:27 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-463 [...] stumbled across this web post about making a custom Authorize attribute. Notice how they are checking the logged in users role [...] [...] stumbled across this web post about making a custom Authorize attribute. Notice how they are checking the logged in users role [...]

]]> By: Manthan http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-461 Manthan Mon, 26 Sep 2011 10:01:26 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-461 <b> THANKS A LOT This post helped me a lot.. THANKS A LOT

This post helped me a lot..

]]> By: Garry http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-424 Garry Wed, 03 Aug 2011 20:30:41 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-424 @Schotime Ah that's right. I got my session storage and cookie storage mixed up :). @Schotime

Ah that’s right. I got my session storage and cookie storage mixed up :) .

]]> By: Schotime http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-418 Schotime Fri, 22 Jul 2011 00:31:38 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-418 @Garry, You <strong>cannot</strong> change the session variable from the client side. It never gets sent to the client @Garry,
You cannot change the session variable from the client side.
It never gets sent to the client

]]> By: Garry http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-416 Garry Fri, 15 Jul 2011 17:43:57 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-416 The only issue I see with this code is that couldn't you spoof what user group you belong to by simply changing your session role variable on the client side? If that's the case, then would obfuscating the role session variable get around the issue by removing the predictability of your role ids? The only issue I see with this code is that couldn’t you spoof what user group you belong to by simply changing your session role variable on the client side?

If that’s the case, then would obfuscating the role session variable get around the issue by removing the predictability of your role ids?

]]> By: Schotime http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-372 Schotime Thu, 10 Feb 2011 08:20:21 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-372 My VS theme is based on this: <a href="http://blog.wekeroad.com/2007/10/17/textmate-theme-for-visual-studio-take-2/" rel="nofollow">http://blog.wekeroad.com/2007/10/17/textmate-theme-for-visual-studio-take-2/</a> The << is the shift operator. My VS theme is based on this: http://blog.wekeroad.com/2007/10/17/textmate-theme-for-visual-studio-take-2/

The << is the shift operator.

]]> By: asp.net mvc AuthorizeAttribute update http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-369 asp.net mvc AuthorizeAttribute update Mon, 17 Jan 2011 21:57:51 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-369 [...] http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/ [...] [...] http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/ [...]

]]> By: Dale http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-366 Dale Thu, 06 Jan 2011 12:52:59 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-366 Hey I dig your VS color scheme can you send me a copy of the settings? Also never seen the double << whats that? Hey I dig your VS color scheme can you send me a copy of the settings? Also never seen the double << whats that?

]]> By: Schotime http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/comment-page-1/#comment-315 Schotime Tue, 21 Dec 2010 13:50:54 +0000 http://schotime.net/blog/index.php/2009/02/17/custom-authorization-with-aspnet-mvc/#comment-315 Does the Users array have any items in it? Does the Users array have any items in it?

]]>