Hello,
I am trying to implement control-level security and permissions in my application. Basically, every user can have a set of permissions that gives them access to certain views and even can allow or deny certain controls on the view from being rendered if denied access. I am trying to figure the best way to accomplish this. My first instinct is to implement a permissions filter attribute that inherits from ActionFilterAttribute but I am unsure of how to access user connection information using the filter context. Each user is part of a company that is stored in a unique database. When the user logs in I would like to store a company code that I can use to retrieve that company's unique connection string. Should I store this as a session variable or is there a better way? ie, can I make use of HttpContext.User?
Thanks,
B
...
Go to the complete details ...