Implementing access control for Kendo Widgets

[Ling]

Hi,
I use Kendo UI widgets for my front end with Spring MVC in the back-end. I need to implement access control for my widgets and I'm looking into various ways in which this can be done.

For example, I would like to enable edit operations for the Kendo Grid only is the user has the required authorization. Or I do not want to display a widget on my web page, if the user is not authorized for it.

What are the different ways in which Kendo UI users implement access control? Are there any recommended approaches to do this or any other libraries that might help with the implementation.

Thanks,

[Dimo]

Hello Ling,

Generally, access and permissions management is outside the scope of the Kendo UI widgets. Since the widgets are client-side components, any client-side access logic can be easily hacked by an advanced user. That's why you need to manage the permissions via server-side code.

The only exception with regard to the above is the Kendo UI MVC Menu's Security trimming:

http://docs.telerik.com/kendo-ui/getting-started/using-kendo-with/aspnet-mvc/helpers/menu/overview#security-trimming

Regards,
Dimo
Telerik