Hi

still can't get this to work.  Once I have set up (I copied the Customers xaml code into my customers.xaml and added the TestClass1.cs (viewmodel) - the form does call the RolesRequired property of the Viewmodel but does not correctly apply the authentication i.e. it allows access to the page when user in not the the Group (Administrators) - when I set the RolesRequired back from 'Binding RolesRequired' to a string 'Administrators' it works.

You say you have this working - have you got this working  and tested with proper users and roles set up  i.e. proper data??

For binding to work this way the framework would need to be able to handle instantiating the viewmodel class (and getting the rolesrequired) then be able back out and stop the page loading (without other viewmodel business logic being run e.g. loading lists etc) if the user is not in a particular role - I'm not sure it does this yet.

Thanks

Richard

Hi

have you tried this and it works - It does not work for me - in my viewmodel the RolesRequired property is called as the page loads - so it appears to bind but does not actually work as intended.

public string RolesRequired
        {
            get
            {
                return _rolesRequired;
            }
            set
            {
                _rolesRequired = value;
                OnPropertyChanged("RolesRequired");
            }
        }

If I change back from

 RequiresRole="{Binding RolesRequired}"

to 

 RequiresRole="Administrators" it works.

Can you confirm you have tested and works, thanks?

Richard

Hi

 Thanks for the quick reply.

 Firstly I would suggest the default implementation is for ‘or’ (and not ‘and’) – that is access should be granted if a user is in 'role1' or say 'role2'.  This I believe is the correct and usual way to implement role based authorisation – the way aspnet role membership works.  See web.config below 

<?xml version="1.0" encoding="utf-8"?>

<configuration>

  <system.web>

    <authorization>

      <allow roles="Interviewers,InsiteAdmin" />

      <deny users="?" />

       </authorization>

  </system.web>

</configuration>

<allow roles="Interviewers,InsiteAdmin" /> means users in either “Interviewers” or “InsiteAdmin” have access.

See http://msdn.microsoft.com/en-us/library/acsd09b0(VS.80).aspx

If you had a page/process that allows access by users in ‘AdminsRole’ and other users in ‘ManagersRole’ then your implementation would require all ‘Admins’ users to be added into the ‘Managers’ role as well – this does not make sense!!! 

 Hope this makes it clearer.

 The documentation mentions that this property (rolesrequired) can be databinded (to a property in viewmodel/model) – is this implemented?  This would enable the developer to add more complex logic if required.  If so can you provide some sample code, thanks.

 I await your reply.

 Richard

What about this

Also the showcase examples (which cover most/all of your Silverlight control) - where is the source code for these examples as this would be a good start - I know you have some template/example applications but these do not cover grids for instance.

Thanks