Exemplo n.º 1
0
        /// <summary>
        /// This method enables user to log into the system
        /// </summary>

        protected void btnLogIn_Click1(object sender, EventArgs e)
        {
            IAdminBLL objBLL   = AdminBLLFactory.CreateAdminBLLObject();
            ILogin    objLogin = LoginBOFactory.CreateLoginObject();

            try
            {
                objLogin.EmployeeId = Convert.ToInt32(txtUserName.Text);
                objLogin.Password   = Convert.ToString(txtPassword.Text);

                int roleID = objBLL.ChkLogInCredentials(objLogin);
                if (roleID != 0)
                {
                    lblMessage.Text   = "Role Id is " + roleID;
                    objLogin.Role     = roleID;
                    Session["userID"] = objLogin.EmployeeId;
                    ILogon user = LogonBOFactory.CreateLogonObject();

                    user = objBLL.GetUserMenu(objLogin);
                    Session["ObjUserInfo"] = user;
                    Response.Redirect("HomePage.aspx");
                }
                else
                {
                    lblMessage.Text = "Incorrect Id or password.";
                }
            }

            catch (Exception ex)
            {
                lblMessage.Text = "Incorrect User Id or password";
            }
        }
Exemplo n.º 2
0
        public ILogon GetUserMenu(ILogin loginDetails)
        {
            SqlConnection objSQLConn    = null;
            SqlCommand    objSQLCommand = null;

            ILogon objLogOn = LogonBOFactory.CreateLogonObject();

            try
            {
                objSQLConn = new SqlConnection(strConnectionString);
                objSQLConn.Open();

                objSQLCommand = new SqlCommand("usp_GetUserName", objSQLConn);

                objSQLCommand.CommandType = System.Data.CommandType.StoredProcedure;
                objSQLCommand.Parameters.AddWithValue("@EmployeeID", loginDetails.EmployeeId);
                SqlDataReader objSQLReader = objSQLCommand.ExecuteReader();

                while (objSQLReader.Read())
                {
                    //objLogOn.EmployeeId = Convert.ToInt32(objSQLReader["EmployeeID"]);
                    objLogOn.EmployeeName = Convert.ToString(objSQLReader["EmployeeFirstName"]) + " " + Convert.ToString(objSQLReader["EmployeeLastName"]);
                    objLogOn.RoleName     = Convert.ToString(objSQLReader["RoleName"]);
                    objLogOn.EmployeeId   = Convert.ToInt32(objSQLReader["EmployeeID"]);
                }

                objSQLReader.Close();

                objSQLCommand = new SqlCommand("usp_GetMenuItems", objSQLConn);

                objSQLCommand.CommandType = System.Data.CommandType.StoredProcedure;
                objSQLCommand.Parameters.AddWithValue("@RoleID", loginDetails.Role);

                SqlDataReader objSQLReader1 = objSQLCommand.ExecuteReader();
                List <IMenu>  menuList      = new List <IMenu>();
                while (objSQLReader1.Read())
                {
                    IMenu menuItem = MenuBOFactory.CreateMenuObject();
                    menuItem.MenuId        = Convert.ToInt32(objSQLReader1["MenuID"]);
                    menuItem.MenuName      = Convert.ToString(objSQLReader1["Title"]);
                    menuItem.ToolTip       = Convert.ToString(objSQLReader1["ToolTip"]);
                    menuItem.NavigationUrl = Convert.ToString(objSQLReader1["NavigationURL"]);
                    menuItem.ParentMenuId  = Convert.ToInt32(objSQLReader1["RoleID"]);

                    menuList.Add(menuItem);
                }
                objLogOn.MenoBo = menuList;

                objSQLReader1.Close();
            }
            catch (Exception ex)
            {
                throw ex;
            }
            finally
            {
                if (objSQLConn != null && objSQLConn.State != System.Data.ConnectionState.Closed)
                {
                    objSQLConn.Close();
                }
            }
            return(objLogOn);
        }