Asp.Net MVC Membership Provider

Here we will learn how to use membership provider in asp.net mvc, and how to create users, and their roles using asp.net mvc membership, with this we will also learn how to assign roles to users in asp.net mvc membership provider, and how remove users from roles, after getting all roles users from asp.net mvc membership and we will implement security in asp.net mvc applications with examples.

To making security in asp.net mvc application use the following method to create the security in asp.net mvc application

(1) Authentication And Authorization in asp.net mvc

Authentication: It is the process of checking that the user is valid or not

Authorization: it is the process of checking that the user is applicable for the process or not

(2) Membership providers in asp.net mvc

(3) Roles based authentication for user in asp.net mvc

We will learn how to create a database for the membership provider in asp.net mvc and how to assign role to user, we will create a registration page to understand this

Let’s create a application for membership provider asp.net mvc.

Step (1) : Go to visual studio and click on new project -> a window will open from here select a 'Asp.net MVC4 web application' and give the name for this project in my case I give it as “MvcMembershipProvider “.

 Now click ok and select a template as Internet Application and engine as Razor engine , after sleeting all these click ok. it will click a solution project this will contain .Css file ,script file and MVC application structure.

Step(2) : after creation of application let's create a database for this and give the name for this database i gave it as 'MVCApp' and then add a connection string to the database.

<connectionStrings>    <add name="DefaultConnection" connectionString = "Data Source=MUNESH-PC;Database=MVCApp;UID=sa;Password=*****" providerName="System.Data.SqlClient" />   </connectionStrings>

if you are creating new connection string then existinf connection string in ewb config file we have remove with we have remove a following line of code from the "InitializeSimpleMembershipAttribute.cs" which available in filter folder. because it give double connection existing run time error.

// WebSecurity.InitializeDatabaseConnection("DefaultConnection", "UserProfile", "UserId", "UserName", autoCreateTables: true);

         After adding the connection string to the project now we need to create membership tables to the database but before this go to the models folder and have a look on AccountModels.cs class. this class automatically create when we select mvc application as Internet application

AccountModel.cs class contain following methods.

now for creating membership tables in database initialize the connection in globel.asax . here we will use code first approach for that we need to add following code in this class

For adding data table in database membership we need to add a line of code in Global.asax

WebSecurity.InitializeDatabaseConnection("DBConnection", "UserProfile", "UserId", "UserName", autoCreateTables: true); Here namespace for WebSecurity is “using WebMatrix.WebData;”

WebSecurity.InitializeDatabaseConnection

Definition for the InitializeDatabaseConnection is

public static void InitializeDatabaseConnection (string connectionStringName, string userTableName, string userIdColumn, string userNameColumn, bool autoCreateTables);

connectionStringName:  It the name of database table where user information stored.        

userTableName: It contain user profile information.        

userIdColumn: this column name of table contain user ID this should be integer.        

userNameColumn: column name of table contain user name. This column is basically used to match profile data of user with membership account data.        

 autoCreateTables: True to indicate that user profile and membership tables should be created if they do not exist; false to indicate that tables should not be created automatically. Although the membership tables can be created automatically, the database itself must already exist.

Now globel.asax page will look like

Now after all this configuration lets run your application and see the ur hoe page and click on register link which is your page right side.

After running your application you go to database and see the table, it will generate following tables for us

When you will click on registration link following screen will open with 3 field .

 we can add more field to this view, for making change in registration view 1^st need to add field in database table name is “UserProfile”;

Here we added 3 column as shown above now we need to add these column parameters in registration model ,it is in Account.cs class which is available in Model.

Code for registration model is

public class RegisterModel     {         [Required]         [Display(Name = "User name")]         public string UserName { get; set; }         [Required]         [StringLength(100, ErrorMessage = "The {0} must be at least {2} characters long.", MinimumLength = 6)]         [DataType(DataType.Password)]         [Display(Name = "Password")]         public string Password { get; set; }         [DataType(DataType.Password)]         [Display(Name = "Confirm password")]         [Compare("Password", ErrorMessage = "The password and confirmation password do not match.")]         public string ConfirmPassword { get; set; }         [Required]         [Display(Name = "EmailID")]         public string EmailId { get; set; }         [Required]         [Display(Name = "address")]         public string Address { get; set; }         [Required]         [Display(Name = "Mobile No")]         public string MobileNo { get; set; }     }

Add these field in registration view

<fieldset>         <legend>Registration Form</legend>         <ol>             <li>                 @Html.LabelFor(m => m.UserName)                 @Html.TextBoxFor(m => m.UserName)             </li>             <li>                 @Html.LabelFor(m => m.Password)                 @Html. PasswordFor (m => m.Password)             </li>             <li>                 @Html.LabelFor(m => m.ConfirmPassword)                 @Html.PasswordFor(m => m.ConfirmPassword)             </li>             <li>                 @Html.LabelFor(m => m.EmailId)                 @Html.TextBoxFor(m => m.EmailId)             </li>             <li>                 @Html.LabelFor(m => m.Address)                 @Html.TextBoxFor(m => m.Address)             </li>             <li>                 @Html.LabelFor(m => m.MobileNo)                 @Html.TextBoxFor(m => m.MobileNo)             </li>         </ol>         <input type="submit" value="Register" />     </fieldset>

Now if you will run your application and you will see registration page it will look with new fields.

Now according to this we need to add or handle these field in controller also so for that go to Account Controller and we have to make changes in HTTPPost method of registration Action.

Now the code for this action according to old registration model is

WebSecurity.CreateUserAndAccount(model.UserName, model.Password);

Now will make changes in this according to new model

WebSecurity.CreateUserAndAccount(model.UserName, model.Password,                         new                         {                             EmailID = model.EmailId,                             Address = model.Address,                             MobileNo = model.MobileNo                         }                         );

So the code for the Registration action method is

[HttpPost]         [AllowAnonymous]         [ValidateAntiForgeryToken]         public ActionResult Register(RegisterModel model)         {             if (ModelState.IsValid)             {                 // Attempt to register the user                 try                 {                     WebSecurity.CreateUserAndAccount(model.UserName, model.Password,                         new                         {                             EmailID = model.EmailId,                             Address = model.Address,                             MobileNo = model.MobileNo                         }                         );                     WebSecurity.Login(model.UserName, model.Password);                     return RedirectToAction("Index", "Home");                 }                 catch (MembershipCreateUserException e)                 {                     ModelState.AddModelError("", ErrorCodeToString(e.StatusCode));                 }             }             // If we got this far, something failed, redisplay form             return View(model);         }

Now run your application and go to registration page and enter some data to fields then save it ,data will save in database.  

                

Download this project from this link Downlaod

curd operation in gridView using ajax

Here we will learn how to do crud operations select,insert, edit, update and delete in grid view using AJAX stored procedure

in asp.net , in asp.net gridview curd operation happen without postback using updatepanel .

Here we will learn curd operation in gridview using stored procedure in asp.net .

Before implement this application first we will design the database table name is 'CollageInfo' and then stored Procedure name is CurdOperationInGridView.

Create Database Table and Stored procedure like following if you needed

CREATE TABLE CollageInfo ( Collageid int identity  PRIMARY KEY , Collagename nvarchar(50), CollageRank double ) GO CREATE PROCEDURE CrudOperationsInGridView @Collageid int = 0, @Collagename varchar(50)=null, @CollageRank int=0, @status varchar(50) AS BEGIN SET NOCOUNT ON; --- Insert New Records For GridView IF @status='INSERT' BEGIN INSERT INTO CollageInfo(Collagename,CollageRank) VALUES(@Collagename,@CollageRank) END --- Select Records in Table For GridView IF @status='SELECT' BEGIN SELECT Collageid,Collagename,CollageRank FROM CollageInfo END --- Update Records in Table  For GridView IF @status='UPDATE' BEGIN UPDATE CollageInfo SET @Collagename=@Collagename,CollageRank=@CollageRank WHERE Collageid=@Collageid END --- Delete Records from Table For GridView IF @status='DELETE' BEGIN DELETE FROM CollageInfo where Collageid=@Collageid END SET NOCOUNT OFF END

Once we Create stored procedure in database then add an aspx page and write the following code on .aspx Page.

<html xmlns="http://www.w3.org/1999/xhtml"> <head id="Head1" runat="server">     <title>GridView Crud  Operations using Stored Procedure in ASP.Net</title>     <style type="text/css">         .GridviewDesign {             font-size: 100%;             font-family: 'Trebuchet MS', 'Lucida Sans Unicode', 'Lucida Grande', 'Lucida Sans', Arial, sans-serif;             color: #303933;         }         .headerstyleForGrid {             color: #FFFFFF;             border-right-color: #abb079;             border-bottom-color: #abb079;             background-color: #df5015;             padding: 0.5em 0.5em 0.5em 0.5em;             text-align: center;         }     </style> </head> <body>     <form id="form1" runat="server">         <asp:ScriptManager ID="scriptmanager1" runat="server"></asp:ScriptManager>         <div class="GridviewDesign">             <asp:UpdatePanel ID="panel1" runat="server">                 <ContentTemplate>                     <asp:GridView runat="server" ID="gvDetailsForCurdOperation" ShowFooter="true" AllowPaging="true" PageSize="10" AutoGenerateColumns="false" DataKeyNames="Collageid,Collagename" OnPageIndexChanging="gvDetailsForCurdOperation_PageIndexChanging" OnRowCancelingEdit="gvDetailsForCurdOperation_RowCancelingEdit"                         OnRowEditing="gvDetailsForCurdOperation_RowEditing" OnRowUpdating="gvDetailsForCurdOperation_RowUpdating" OnRowDeleting="gvDetailsForCurdOperation_RowDeleting" OnRowCommand="gvDetailsForCurdOperation_RowCommand">                         <HeaderStyle CssClass="headerstyleForGrid" />                         <Columns>                             <asp:BoundField DataField="Collageid" HeaderText="Collage Id" ReadOnly="true" />                             <asp:TemplateField HeaderText="Collage Name">                                 <ItemTemplate>                                     <asp:Label ID="lblCollagename" runat="server" Text='<%# Eval("Collagename")%>' />                                 </ItemTemplate>                                 <EditItemTemplate>                                     <asp:TextBox ID="txtCollagename" runat="server" Text='<%# Eval("Collagename")%>' />                                 </EditItemTemplate>                                 <FooterTemplate>                                     <asp:TextBox ID="txtpname" runat="server" />                                 </FooterTemplate>                             </asp:TemplateField>                             <asp:TemplateField HeaderText="Collage Rank">                                 <ItemTemplate>                                     <asp:Label ID="lblCollageRank" runat="server" Text='<%# Eval("CollageRank")%>'></asp:Label>                                 </ItemTemplate>                                 <EditItemTemplate>                                     <asp:TextBox ID="txtCollageRank" runat="server" Text='<%# Eval("CollageRank")%>' />                                 </EditItemTemplate>                                 <FooterTemplate>                                     <asp:TextBox ID="txtCollageRank" runat="server" />                                     <asp:Button ID="btnAddNewItem" CommandName="AddNew" runat="server" Text="Add" />                                 </FooterTemplate>                             </asp:TemplateField>                             <asp:CommandField ShowEditButton="True" ShowDeleteButton="true" />                         </Columns>                     </asp:GridView>                     <asp:Label ID="lblresult" runat="server"></asp:Label>                 </ContentTemplate>                 <Triggers>                     <asp:AsyncPostBackTrigger ControlID="gvDetailsForCurdOperation" />                 </Triggers>             </asp:UpdatePanel>         </div>     </form> </body> </html>

After completion code for .aspx page write the following code on .aspx.cs page

protected void Page_Load(object sender, EventArgs e)         {             if (!IsPostBack)             {                 BindGridview();             }         }         protected void BindGridview()         {             DataSet ds = new DataSet();             using (SqlConnection con = new SqlConnection("Data Source=Munesh;Integrated Security=true;Initial Catalog=GridCurdOperation"))             {                 con.Open();                 SqlCommand cmd = new SqlCommand("CrudOperationsInGridView", con);                 cmd.CommandType = CommandType.StoredProcedure;                 cmd.Parameters.AddWithValue("@status", "SELECT");                 SqlDataAdapter da = new SqlDataAdapter(cmd);                 da.Fill(ds);                 con.Close();                 if (ds.Tables[0].Rows.Count > 0)                 {                     gvDetailsForCurdOperation.DataSource = ds;                     gvDetailsForCurdOperation.DataBind();                 }                 else                 {                     ds.Tables[0].Rows.Add(ds.Tables[0].NewRow());                     gvDetailsForCurdOperation.DataSource = ds;                     gvDetailsForCurdOperation.DataBind();                     int columncount = gvDetailsForCurdOperation.Rows[0].Cells.Count;                     gvDetailsForCurdOperation.Rows[0].Cells.Clear();                     gvDetailsForCurdOperation.Rows[0].Cells.Add(new TableCell());                     gvDetailsForCurdOperation.Rows[0].Cells[0].ColumnSpan = columncount;                     gvDetailsForCurdOperation.Rows[0].Cells[0].Text = "No Records Found";                 }             }         }         protected void gvDetailsForCurdOperation_RowCommand(object sender, GridViewCommandEventArgs e)         {             if (e.CommandName.Equals("AddNew"))             {                 TextBox txtname = (TextBox)gvDetailsForCurdOperation.FooterRow.FindControl("txtpname");                 TextBox txtprice = (TextBox)gvDetailsForCurdOperation.FooterRow.FindControl("txtprice");                 crudoperationsForGrid("INSERT", txtname.Text, txtprice.Text, 0);             }         }         protected void gvDetailsForCurdOperation_RowEditing(object sender, GridViewEditEventArgs e)         {             gvDetailsForCurdOperation.EditIndex = e.NewEditIndex;             BindGridview();         }         protected void gvDetailsForCurdOperation_RowCancelingEdit(object sender, GridViewCancelEditEventArgs e)         {             gvDetailsForCurdOperation.EditIndex = -1;             BindGridview();         }         protected void gvDetailsForCurdOperation_PageIndexChanging(object sender, GridViewPageEventArgs e)         {             gvDetailsForCurdOperation.PageIndex = e.NewPageIndex;             BindGridview();         }         protected void gvDetailsForCurdOperation_RowUpdating(object sender, GridViewUpdateEventArgs e)         {             int Collageid = Convert.ToInt32(gvDetailsForCurdOperation.DataKeys[e.RowIndex].Values["Collageid"].ToString());             TextBox txtname = (TextBox)gvDetailsForCurdOperation.Rows[e.RowIndex].FindControl("txtCollagename");             TextBox txtCollageRank = (TextBox)gvDetailsForCurdOperation.Rows[e.RowIndex].FindControl("txtCollageRank");             crudoperationsForGrid("UPDATE", txtname.Text, txtCollageRank.Text, Collageid);         }         protected void gvDetailsForCurdOperation_RowDeleting(object sender, GridViewDeleteEventArgs e)         {             int Collageid = Convert.ToInt32(gvDetailsForCurdOperation.DataKeys[e.RowIndex].Values["Collageid"].ToString());             string Collagename = gvDetailsForCurdOperation.DataKeys[e.RowIndex].Values["Collagename"].ToString();             crudoperationsForGrid("DELETE", Collagename, "", Collageid);         }         protected void crudoperationsForGrid(string status, string Collagename, string price, int Collageid)         {             using (SqlConnection con = new SqlConnection("Data Source=Munesh;Integrated Security=true;Initial Catalog=GridCurdOperation"))             {                 con.Open();                 SqlCommand cmd = new SqlCommand("CrudOperationsInGridView", con);                 cmd.CommandType = CommandType.StoredProcedure;                 if (status == "INSERT")                 {                     cmd.Parameters.AddWithValue("@status", status);                     cmd.Parameters.AddWithValue("@Collagename", Collagename);                     cmd.Parameters.AddWithValue("@CollageRank", price);                 }                 else if (status == "UPDATE")                 {                     cmd.Parameters.AddWithValue("@status", status);                     cmd.Parameters.AddWithValue("@Collagename", Collagename);                     cmd.Parameters.AddWithValue("@CollageRank", price);                     cmd.Parameters.AddWithValue("@Collageid", Collageid);                 }                 else if (status == "DELETE")                 {                     cmd.Parameters.AddWithValue("@status", status);                     cmd.Parameters.AddWithValue("@Collageid", Collageid);                 }                 cmd.ExecuteNonQuery();                 lblresult.ForeColor = Color.Green;                 lblresult.Text = Collagename + " details " + status.ToLower() + "d successfully";                 gvDetailsForCurdOperation.EditIndex = -1;                 BindGridview();             }         }

Now  run your application and see the output and perform Curd operation For Gridview.

you can download code semple from here Download