[Solved] Grid Editing based on user permissions

[Marco Teodoro]

hello,

i´m would like to know if someone implement a validation logic to support grid editing base on user roles.

for instance: admin can create, read, update, and delete. But normal user will just be able to read. 

how have you done this. i have one view for each type of action but i don't like this because i need to replicate all the code from one view to another. 

also if i just want to add delete and read permission i need to maintain the data bind update action and use some javascript to remove the button from view in run time.

i hope and think that some of you have think in a better approach. 

best regards

[Brian Roth]

I actually just implemented logic for a similar situation yesterday.  My logic hides the command button column and the add new record button for users that don't have permission to edit or delete items.  If you have the roles set up in the standard Microsoft role provider, you can do something like this:

<%= Html.Telerik().Grid<MyObject>()

.Name("MyGrid")

.ToolBar(commands =>

{

// Hide the insert command if the user doesn't have access

if (User.IsInRole("admin")) commands.Insert();

})

.Columns(columns =>

{

//Command column with two commands

columns.Command(commands =>

{

commands.Delete();                 // Hide the edit button if the user doesn't have access

if (User.IsInRole("admin")) commands.Edit();

})

// Hide the edit row if the user doesn't have access

.Visible(User.IsInRole("readAndDelete") || User.IsInRole("admin"));

columns.Bound(o => o.Name);

})

%>

[Carson]

What if I want to hide a command button based on item data, not user data?
I want to do something like:

<%= Html.Telerik().Grid<MyObject>()
        .Name("MyGrid")
        .Columns(columns =>
        {
            //Command column with two commands
            columns.Command(commands =>
            {
                // Hide the delete button if the item is referenced
                // by another database object.
                // Of course, this doesn't work. But, is there a way?
                if (o => o.Links.Count() < 1) commands.Delete();

                commands.Edit();
            })
            columns.Bound(o => o.Name);
        })
    %>

Thanks,
Carson

[mike]

This is great. Very helpful.