security - ASP.NET Authenticate as someone else -


i develop asp.net mvc 3 site there 2 different kinds of users: global administrator , local administrator.

a local administrator can administrate own data. global administrator can select local administrator , sort-of "simulate" being user. this, mean shoud preferably able see same views etc.

what thoughts on how behavior implemented?

best regards kenneth

if using forms authentication impersonate user:

[authorize(roles = "admin")] public actionresult becomeglobaladmin() {     formsauthentication.setauthcookie("globaladmin", false);     return redirecttoaction("index"); } 

you might want store information session indicate user in fact administrator acting global administrator (if need such functionality).


Comments

Popular posts from this blog

WPF: binding viewmodel property of type DateTime to Calendar inside ItemsControl -

java - Getting corefrences with Standard corenlp package -

Java - Returning an array from a method to main -