This is a migrated thread and some comments may be shown as answers.

Menu security trimming with areas having same controller names

8 Answers 161 Views

This is a migrated thread and some comments may be shown as answers.

Henry asked on 13 Jan 2015, 12:04 PM

Hi,

I've noticed that security trimming doesn't work when there's another controller with the same name in another area. We have one extra area currently in use, named "Mobile".

We correctly have the namespaces set up for each route, so the actions work fine otherwise between areas. For example our default route looks like this:

routes.MapRoute(

"Default",

"{controller}/{action}/{id}",

new { controller = "Home", action = "Index", id = UrlParameter.Optional },

new[] { "MvcApp.Controllers" } //namespace

);

Example menu:

@(Html.Kendo().Menu()

.Name("menu")

.Items(menu => {

menu.Add().Text("About").Action("About", "Home", new { area = "" });

}))

Security trimming won't work, unless our Mobile area's HomeController also has that same action (About()). If it's not there, authorize attribute won't work for the menu.

8 Answers, 1 is accepted

answered on 15 Jan 2015, 07:30 AM

Hi Georgi,

I was able to reproduce this issue by making changes to the sample project in this older thread: http://www.telerik.com/forums/menu-does-not-work-with-areas

I added empty HomeController to "MyArea", and then changed the menu to:

@(Html.Kendo().Menu()

.Name("menu")

.Items(menu => {

menu.Add().Text("About").Action("About", "Home", new { area = "" });

}))

Then I decorated the "root" area's About action with [Authorize(Roles = "Admin")].

Security trimming will only work if I then add About action to "MyArea" as well.

To support duplicate controller names, I added the namespace setting to route:

routes.MapRoute(

"Default",

"{controller}/{action}/{id}",

new {controller = "Home", action = "Index", id = UrlParameter.Optional},

new[] {"MvcApplication4.Controllers"}

);