Equivalent to ASP.NET WebForms URL Authorization in MVC

Question

We're considering making the move from WebForms to MVC for our (quite substantial) intranet application.

The intranet app currently uses Windows authentication. Authorization to particular folders is controlled by web.config files inside each folder. The app also uses a Menu control which picks all this up and only shows users menu links to pages they are authorised to view. All this functionality comes out of the box with WebForms.

In terms of the conversion to MVC, I think that replacing this functionality is going to be one of the key challenges.

Can anyone tell me what tools are available in MVC to:

1. restrict users' access to certain pages / views whatever based on their Active Directory group membership
2. generate markup for a menu which is aware of the users' authorisation to certain pages / views

That would be mighty helpful.

Answer 1

restrict users' access to certain pages / views whatever based on their Active Directory group membership

Decorating the controller action with the [Authorize] attribute.

generate markup for a menu which is aware of the users' authorisation to certain pages / views

Depending on your exact requirements you could build a custom HTML helper. You may also take a look at MVCContrib MenuBuilder.

Answer 2

This is a 2 part blog where I explained how to achieve this.

http://blogs.msdn.com/b/sajoshi/archive/2010/06/01/user-authentication-against-ad-and-roles-based-authorization-in-asp-net-mvc-part-i.aspx

http://blogs.msdn.com/b/sajoshi/archive/2010/06/01/user-authentication-against-ad-and-roles-based-authorization-in-asp-net-mvc-part-ii.aspx

Let me know if you need specific details..