how to set roles to limit the access of pages in asp.net? - asp.net-2.0

I am developing a asp.net web site, having folders student, admin..i both student and admin folder have registration and login page, i want to know how can i access limit of admin folder pages by any user. Basically i want that the admin folder registered ppl should have access to all the pages of student section if they can login using Id, Password...but i don't want any of student to access even the login page of admin section irrespective of even any student know URl for the admin login page, registration page(because i don't want him to register at all) also i want to know ho can i again sub divide the a few limits for the some other admin. Basically i want to set roles that admin can access all web site pages but student even cant access that admin folders pages and again some different kind of admin cant access a few pages from the same admin section page please elaborate me on this how can i achieve this ?

I would recommend looking at the Role Manager that is built into ASP.Net starting with version 2.0. Rather than attempting to explain all the details I am providing the following How To from MSDN that will show you How To: Use Role Manager in ASP.NET 2.0.
Once you start using it you can then come back and post some more specific questions if you have any problems.

Related

Drupal 7 - Handling multiple type of users

I need to create a website for a client using Drupal 7, the only problem is that I don't know how to handle multiples login forms and permissions.
The goal is that A type of user must be allowed to browse and do some stuff on the website but they can't post offers, however B type of users can only post their offers and manage their contents, the system is just as Upwork.
How can I achieve this ? I'm not good at PHP but I know how to use Drupal, so are there modules that can help me to do what I want?
This is exactly how Drupal works by default using role based permissions. You won't need to install a module or have different login forms.
Start by creating different roles. RoleA can view certain content types and maybe post comments. RoleB can do everything RoleA can do plus post offers and manage their own content. You can control create/edit/delete permissions by content type. It can all be done using the point and click admin interface.
On admin page /admin/user (root relative path to admin page) you can see your site users. There's also link "+ Add user" for creating new user. So if you edit/create an user, on user edit page there is a section "Roles" where you can set what roles that user can use. One role may be "Browse some stuff" and other "Edit some stuff".. You can add/edit roles at admin page /admin/people/permissions/roles. So create the roles you need there.
And to precisely set what role can do what there is admin page: /admin/people/permissions. So when you create all the roles you need, go to that page to set permissions and after that you can assign roles to your users.

Alfresco community - wiki page access without any authentication

Is it possible to visit alfresco wiki pages without a user name and password?
I don't want my all users to have an account to read my wiki pages.
I have created some consumer users and they must have to log in and read the wiki. I don't want to be like this.
Is there any way creating wiki pages any Guest user can read without authentication?
Below is the link that is use full for understanding how we can create a page in alfresco share.
http://docs.alfresco.com/4.1/tasks/tutorial-share-add-page.html
For solving your issue, find what is the location for the wiki page and update the below thing in XML.
<authentication>user</authentication>
To create a page that can only be accessed by administrators using an authentication level of admin. To create a page that can be accessed by any user, including those who are not logged in, set the authentication level to none.

Wordpress Admin and End user website

Am new to word-press, i need to build a website like i have an administrator and normal users. Both admin and normal users have a registration form. Admin will decide the fields to be included in normal user's registration form (admin can select the fields from a drop down menu).
Administrator could manage all the normal users (delete,block,approve etc..).For example, normal users are restaurant owners.The owners will register in the website, admin can approve the requests, etc. When i open the website , the website should display all the coffee shops in a map.
How can i do this application in word-press any reference please?
Please help
Thanks

I have two master pages for admin it is different and user is different but if user copy & paste the URL he can find the page information

I have two master pages in a Three Tier Architecture project.
For admin it is different and for user it is different but if user copy & paste the URL he can find the page information.
Give me a solution please..
You need to keep the user type in session after login. And on the particular page check the user type.
If not matching found redirect to login page.
or
broader solution is you need to implement Role Management of asp.net.
MSDN Link
Some useful links
Admin role management in ASP.NET website
http://www.codeproject.com/Articles/667152/Role-Providers

django-cms user can't add pages

django 1.5.1
django cms 2.4.2
i am just learning django-cms and am working on my first test site. I searched this site and googled for these questions but can't find any answers which is why I am posting here.... Any help would be appreciated!
Through the admin page (as superuser) i added a group with permission to add/change/delete pages in addition to other permissions.
I create a user and assign the user to this group.
First of all, if i don't specify that user as staff then they can't access the admin site to login to begin with - this just doesn't make sense to me: what's the point of a user who never has the option to log in? Or is there something I'm missing - is there another way to log in besides the admin site itself.
Second, after marking that user as staff, and keeping in mind that the user is a member of group with permission to add/edit/delete pages, when the user logs in he can perform other admin tasks that he was given permissions for but still can't add/edit/delete pages. Although pages shows up as an object there is no link to the page list.
The Staff setting is to differentiate between users who are allowed to access the Django admin and users who aren't i.e. regular users who have signed up to your website via a registration form.
I had the same problem as you creating a new non-superuser user and not being able to add or edit pages as that user. It turned out that I needed to set CMS_PERMISSION = False in my settings.py.
If CMS_PERMISSION == True, you get a more fine-grained permissions framework where each page has its own list of users who are allowed to view and edit it, so permission to edit is done on a page-by-page basis (unless you're a superuser). If you don't need that functionality, I suggest you turn it off.
If you do want the more fine-grained permissions system, but you also want some users to be able to edit any page on the site, log in to django admin as a superuser and look at Cms -> Pages global permissions. From there you can give blanket edit rights to any user or group.

Resources