English 中文(简体)
上传/ Knockout 建筑最佳做法 -- -- 限制用户使用通过网络API 暴露的功能的首选方法是什么?
原标题:Upshot/Knockout Architectural Best Practices - What is the preferred of method of limiting user access to functions exposed through the WebAPI?

使用击倒和Upshot执行单页应用程序的一个基本想法是,大多数数据将使用AJAX从JSON格式接收并发送到服务器。

在服务器上,我们将暴露一些端点(也许使用WebAPI和DbData主计长)来回应Upshot的要求。 这些端点可以提供对客户名单、先前订单、账户信息等数据的一般性查询。

显然,一个客户不适宜查看另一个客户账户信息、先前的订单或其他私人数据。

  • What strategies or approaches be used to secure queries (and data) which are being requested from upshot (or other mechanism) to the server? (In other words, how do we make sure a user only has access to his own data?)
  • Are the strategies the same or different than those used in a normal ASP.NET MVC application--namely use of the Authorize attribute?

这或许是一个非常简单的问题,但我仍不清楚WebAPI控制器与通常的 ASP.NET MVC控制器之间的所有差异。

谢谢你的帮助!

最佳回答

自定义授权属性是执行这一要求的一种可能方式。与标准 ASP.NET MVC 控制器的唯一不同之处在于您来自 system.web.Htp.AuthorizeAttrapitte ,而不是

问题回答

暂无回答




相关问题
WebForms and ASP.NET MVC co-existence

I am trying to make a WebForms project and ASP.NET MVC per this question. One of the things I ve done to make that happen is that I added a namespaces node to the WebForms web.config: <pages ...

Post back complex object from client side

I m using ASP.NET MVC and Entity Framework. I m going to pass a complex entity to the client side and allow the user to modify it, and post it back to the controller. But I don t know how to do that ...

Create an incremental placeholder in NHaml

What I want to reach is a way to add a script and style placeholder in my master. They will include my initial site.css and jquery.js files. Each haml page or partial can then add their own required ...

asp.net mvc automapper parsing

let s say we have something like this public class Person { public string Name {get; set;} public Country Country {get; set;} } public class PersonViewModel { public Person Person {get; ...

structureMap mocks stub help

I have an BLL that does validation on user input then inserts a parent(PorEO) and then inserts children(PorBoxEO). So there are two calls to the same InsertJCDC. One like this=>InsertJCDC(fakePor)...

ASP.NET MVC: How should it work with subversion?

So, I have an asp.net mvc app that is being worked on by multiple developers in differing capacities. This is our first time working on a mvc app and my first time working with .NET. Our app does not ...

System.Web.Mvc.Controller Initialize

i have the following base controller... public class BaseController : Controller { protected override void Initialize(System.Web.Routing.RequestContext requestContext) { if (...

热门标签