security - ASP.NET Authenticate as someone else -
i develop asp.net mvc 3 site there 2 different kinds of users: global administrator , local administrator.
a local administrator can administrate own data. global administrator can select local administrator , sort-of "simulate" being user. this, mean shoud preferably able see same views etc.
what thoughts on how behavior implemented?
best regards kenneth
if using forms authentication impersonate user:
[authorize(roles = "admin")] public actionresult becomeglobaladmin() { formsauthentication.setauthcookie("globaladmin", false); return redirecttoaction("index"); } you might want store information session indicate user in fact administrator acting global administrator (if need such functionality).
Comments
Post a Comment