Remove Assigned Users From Role In ASP.NET MVC

Before proceeding to this tutorial please go to,

• Assigning Role To User In ASP.NET MVC Membership

In previous tutorial swe learned how to assign role to users,  here we will learn how to remove Role from assigned user. For this purpose we need to add a action method in account controller class. In previous tutorials we created a model class name is “AllroleWithAllUser” . we will use the same class here to pass this class in controller.

Following code is for “RemoveRoleForUser” in controller class.

[HttpGet]
public ActionResult RemoveRoleAddedToUser()
{
    AssignRole objvm = new AssignRole();
    objvm.UserRolesList = GetAll_UserRoles();
    objvm.Userlist = GetAll_Users();
    return View(objvm);
}

After creating action method for [HttpGet], now we need to add another action method for the [httpPost] . So the following is code for the “RemoveRoleForUser” action method for[httpPost] method.

[HttpPost]
[ValidateAntiForgeryToken]
public ActionResult RemoveRoleAddedToUser(AssignRole _assignRole)
{
    if (_assignRole.UserRoleName == "0")
    {
        ModelState.AddModelError("RoleName", "select proper RoleName");
    }
    if (_assignRole.UserID == "0")
    {
        ModelState.AddModelError("UserName", "select proper Username");
    }
    if (ModelState.IsValid)
    {
        int currentUserId = CheckUserWithUserRole(Convert.ToInt32(_assignRole.UserID));
        if (currentUserId == Convert.ToInt16(_assignRole.UserRoleName)) {
            var UserName = GetUserName_BY_UserID(Convert.ToInt32(_assignRole.UserID));
            var UserRoleName = GetRoleNameByRoleID(Convert.ToInt32(_assignRole.UserRoleName));
            Roles.RemoveUserFromRole(UserName, UserRoleName);
            ViewBag.ResultMessage = "User Role is removed successfully !";
        } else {
            ViewBag.ResultMessage = "This current user doesn't belong to selected user role.";
        }
        _assignRole.UserRolesList = GetAll_UserRoles();
        _assignRole.Userlist = GetAll_Users();
    } else {
        _assignRole.UserRolesList = GetAll_UserRoles();
        _assignRole.Userlist = GetAll_Users();
    }
    return View(_assignRole);
}

Following is the code for removing the role for the respective user. Following is the code for checking that selected user belongs to the respective RolId.

public int CheckUserWithUserRole(int UserId)
{
    using(UsersRoleContext context = new UsersRoleContext())
    {
        int RoleId = context.webpages_UsersInRole.Where(c => c.UserId == UserId).Select(c => c.RoleId).SingleOrDefault();
        return RoleId;
    }
}

Now right click on the” RemoveRoleAddedToUser” controller and add the view to this controller, this view contains the scaffold template as “Create” model class and model class as “assignRole”.

After clicking add write the following code to this view,

@model MvcMembershipProvider.Models.AssignRole
@ {
    ViewBag.Title = "RemoveRoleAddedToUser";
} <
h2 > RemoveRoleAddedToUser < /h2> <
    link href = "~/bootstrap/css/bootstrap.min.css"
rel = "stylesheet" / >
    <
    script src = "~/bootstrap/js/bootstrap.min.js" > < /script>
@using(Html.BeginForm())
{
        @Html.AntiForgeryToken()
        @Html.ValidationSummary(true) <
            fieldset >
            <
            legend > AssignRole < /legend> <
            div class = "editor-label" >
            @Html.LabelFor(model => model.UserRoleName) <
            /div> <
            div class = "editor-field" >
            @ * @Html.EditorFor(model => model.UserRoleName) * @
        @Html.DropDownListFor(m => m.UserRoleName, newSelectList(Model.UserRolesList, "Value", "Text"),
            new {
                style = "width:200px", @class = "form-control"
            })
        @Html.ValidationMessageFor(model => model.UserRoleName) <
            /div> <
            div class = "editor-label" >
            @Html.LabelFor(model => model.UserID) <
            /div> <
            div class = "editor-field" >
            @ * @Html.EditorFor(model => model.UserID) * @
        @Html.DropDownListFor(m => m.UserID, new SelectList(Model.Userlist, "Value", "Text"),
            new {
                style = "width:200px", @class = "form-control"
            })
        @Html.ValidationMessageFor(model => model.UserID) <
            /div> <
            p >
            <
            input type = "submit"
        value = "Remove User Role" / >
            <
            /p> <
            /fieldset>
    } <
    div >
    @Html.ActionLink("Back to List", "Index") <
    /div>
@section Scripts {
    @Scripts.Render("~/bundles/jqueryval")
}

Now run your application and go to the following URL,

http://localhost:50526/Account/RemoveRoleAddedToUser

Now select user and role type from dropdown list and then check this work.

Authorize attribute in controller

We can authorize or we can give permission to the controller using attribute. There is a attribute [Authorize] to authorize. Following is the code for giving the permission code to the controller. If you want to give permission to the “admin” to full controller , if user has the permission for admin then it will redirect to this page otherwise it will redirect to login page.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
namespace MvcMembershipProvider.Controllers
{
    [Authorize(Roles = "Admin")]
    public class Authonticate1Controller: Controller
    {
        public ActionResult Index()
        {
            return View();
        }
    }
}

If you want to give permission to particular user then use the following code. Here only admin can access then action method.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
namespace MvcMembershipProvider.Controllers
{
    public class Authonticate1Controller: Controller
    {
        [Authorize(Roles = "Admin")]
        public ActionResult Index()
        {
            return View();
        }
    }
}

And the following code for the particular action method for the particular user.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
namespace MvcMembershipProvider.Controllers
{
    public class Authonticate1Controller: Controller
    {
        [Authorize(Roles = "Admin", Users = "munesh")]
        public ActionResult Index()
        {
            return View();
        }
    }
}