How to make user authorized access in asp.net mvc 5?

Question

Hi Team I have some logic, and i need some help. Normal user loggs in without a problem. Now when i try to create a SuperAdmin user. _Unathorized 404. How do i get pass this? Are there any samples than can compare this to mine? I am using Microsoft AspNet Identity on my application.

Sachin Singh · Answer

create Roles , there are atleast 4 ways to achieve it , the simplest one is to use Role provider [Authorize(Roles = "Administrator, PowerUser" )] public class ControlPanelController : Controller { public ActionResult SetTime() { } [Authorize(Roles = "Administrator" )] public ActionResult ShutDown() { } } public class CustomRoleProvider : RoleProvider { public CustomRoleProvider(){ } public override bool IsUserInRole( string username, string roleName) { List string > roles = Users.GetRoles(username); return roles.Count != 0 && roles.Contains(roleName); } public override string [] GetRolesForUser( string username) { List string > roles = Users.GetRoles(username); return roles.ToArray(); } #region Not Implemented Methods public override void AddUsersToRoles( string [] usernames, string [] roleNames) { throw new NotImplementedException(); } public override string ApplicationName { get { throw new NotImplementedException(); } set { throw new NotImplementedException(); } } public override void CreateRole( string roleName) { throw new NotImplementedException(); } public override bool DeleteRole( string roleName, bool throwOnPopulatedRole) { throw new NotImplementedException(); } public override string [] FindUsersInRole( string roleName, string usernameToMatch) { throw new NotImplementedException(); } public override string [] GetAllRoles() { throw new NotImplementedException(); } public override string [] GetUsersInRole( string roleName) { throw new NotImplementedException(); } public override void RemoveUsersFromRoles( string [] usernames, string [] roleNames) { throw new NotImplementedException(); } public override bool RoleExists( string roleName) { throw new NotImplementedException(); } #endregion } //under system.web in web.config "true" defaultProvider= "CustomRoleProvider" enabled= "true" > "CustomRoleProvider" type= "[Namespace here].CustomRoleProvider, [Application Assembly here]" />