Example #1
0
        protected void Page_load(object sender, EventArgs e)
        {
            // if session user is empty then
            // get the logged in user
            // check if is in the valid ad group
            // if true then continue
            // else redirect to login page

            string _domain           = ConfigurationManager.AppSettings.Get("domain");
            string _domainController = ConfigurationManager.AppSettings.Get("domainController");
            string _userGroups       = ConfigurationManager.AppSettings.Get("userGroups");

            if (!IsPostBack)
            {
                if (Session["UserId"] == null)
                {
                    string loggedInWindowsUser = WindowsIdentity.GetCurrent().Name;
                    if (AdService.IsInGroup(_userGroups, _domain, _domainController))
                    {
                        Session["UserId"] = loggedInWindowsUser;
                    }
                    else
                    {
                        Response.Redirect("Login.aspx");
                    }
                }
            }
        }