security-trimming

.Net Core Security Trimming using Authorized Attribute on Controller Methods

吃可爱长大的小学妹 提交于 2020-01-25 06:50:21
问题 We just upgraded to .NET Core, and i'm trying to get things up and running with as little refactor as possible. All of our Security is handled by custom attribute decorations on controller methods. Kinda like this: [CustomAuthorize(Roles = "VIEWONLY, DEVELOPER, ADMIN, CHIEFADMIN") public ActionResult GetPage(string id){ return view; } Previously i had a custom HTMLHelper helping me do security trimming on Menu Links. It would check the controller action, and return true/false. Most of the

Security trimming in search web service

一个人想着一个人 提交于 2019-12-08 09:50:48
问题 I have a web application which consumes the SharePoint 2007 search web service ( http://localhost/_vti_bin/search.asmx ). My scope contains several content sources, all of them contain business data (content is crawled via SQL queries on external databases). I need one of these content sources to provide me security trimmed results. To put it simple, I have two tables: Table A with contents: NodeId, Title, Content Table B with permissions: NodeId, Username Now, the crawler indexes table A