Exemple #1
0
        public void OnAuthorization(AuthorizationContext filterContext)
        {
            if (filterContext == null)
            {
                throw new ArgumentNullException("filterContext");
            }

            filterContext.HttpContext.Response.Cache.SetNoServerCaching();
            filterContext.HttpContext.Response.Cache.SetNoStore();

            IPrincipal user = filterContext.HttpContext.User;

            if (!user.Identity.IsAuthenticated)
            {
                // authentication failed, redirect to login page
                string returnUrl = "";
                if (filterContext.HttpContext.Request.Url != null)
                {
                    returnUrl = filterContext.HttpContext.Request.Url.PathAndQuery;
                }
                filterContext.Result = new AccountController().LogOff(returnUrl);
            }
            else
            {
                if (String.IsNullOrWhiteSpace(Roles))
                {
                    isAuthorized = true;
                }
                else
                {
                    Mateus_wcEntities db = new Mateus_wcEntities();
                    IRolesRepository  rolesRepository = new RolesRepository(db);
                    var userRoles = rolesRepository.GetRoleNamesByUsername(user.Identity.Name); //rolesRepository.GetRoleNameByUsername(user.Identity.Name); //

                    foreach (string role in userRoles)
                    {
                        if (_rolesSplit.Contains(role))
                        {
                            isAuthorized = true;
                            break;
                        }
                    }
                }

                if (!isAuthorized)
                {
                    filterContext.Result = new RedirectResult("~/Error/UnauthorizedAccess");
                }
            }
        }
Exemple #2
0
 public FulfilledFactorController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #3
0
 public WorkDoneController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #4
0
 public AssessmentQuestionController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #5
0
 public AssessmentTypeController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #6
0
 public RegionalOfficeController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #7
0
 public PlaceController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #8
0
 public ReportController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #9
0
 public PhysicalEntityController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #10
0
 public RiskController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #11
0
 public LegalEntityOwnerController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #12
0
 public PostalOfficeController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #13
0
 public ChangeTypeController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #14
0
 public ServiceTypeController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #15
0
 public UserActivityController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #16
0
 public AdditionalFactorController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #17
0
 public WayOfRepresentationController()
 {
     db = new Mateus_wcEntities();
 }
Exemple #18
0
 public CurrencyController()
 {
     db = new Mateus_wcEntities();
 }