blocks|key|4638640|text|我认为最简单的方法是对您的自定义授权进行一些小的修改，这样ELMAH授权就可以工作了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4638641|cookie选项1:在登录时设置FormsAuthentication+。这样，在web.config中，allow+users="username"应该可以工作。成功登录后，您可以使用FormsAuthentication.SetAuthCookie(theUsername,+true)设置cookie。|offset|length|style|BOLD|CODE|4638642|ELMAH授权如下所示：|4638643|<location+path="elmah.axd"+inheritInChildApplications="false">
++++<system.web>
+++++++<authorization>+++
+++++++++<allow+users="theUserName"+/>
+++++++++<deny+users="*"+/>
+++++++</authorization>
++++</system.web>
++...other+config+settings
</location>|code-block|syntax|javascript|4638644|选项2:如果您使用的是将用户放入角色，则可以覆盖默认的角色提供程序，以使用您创建的函数来获取角色。这种方式稍微复杂一些，但是可以让您在web.config中利用基于角色的身份验证，这对于保护静态文件(.pdf等)传递非常有用。如果感兴趣，我可以为此添加代码。|4638645|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/twk5762b.aspx^0|0|10|3A|1H|M|2L|1G|0|0|0|C|0|0|0|3L|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|10|8|@$D|11|E|12|F|G]|$D|13|E|14|F|H]]|9|@$D|15|E|16|1|17]]|A|$]]|$1|I|3|J|5|6|7|18|8|@$D|19|E|1A|F|G]]|9|@]|A|$]]|$1|K|3|L|5|M|7|1B|8|@]|9|@]|A|$N|O]]|$1|P|3|Q|5|6|7|1C|8|@$D|1D|E|1E|F|G]]|9|@]|A|$]]|$1|R|3|-4|5|6|7|1F|8|@]|9|@]|A|$]]]|S|$T|$5|U|V|W|A|$X|Y]]]]

I think the easiest approach would be to make some minor alterations to your custom authorization so the ELMAH authorization will work.

Option 1: Set the FormsAuthentication cookie on login. This way, in the web.config the <code>allow users="username"</code> should work. On successful login you can set the cookie with
<a href="http://msdn.microsoft.com/en-us/library/twk5762b.aspx">FormsAuthentication.SetAuthCookie(theUsername, true)</a>.

The ELMAH authorization would look something like:

<pre><code>&lt;location path="elmah.axd" inheritInChildApplications="false"&gt;
 &lt;system.web&gt;
 &lt;authorization&gt; 
 &lt;allow users="theUserName" /&gt;
 &lt;deny users="*" /&gt;
 &lt;/authorization&gt;
 &lt;/system.web&gt;
 ...other config settings
&lt;/location&gt;
</code></pre>

Option 2: If you are using putting users into roles, you can override the default role provider to use the function you made to get roles. This way is a little more involved but then lets you harness role-basing authentication in the web.config, which is really nice for securing things like static file (.pdf etc) delivery. I can add code for this if interested.

blocks|key|5120824|text|在这种情况下，系统如何获取用户名或角色并不重要。无论是来自内置提供程序、您自己实现的提供程序，还是在自定义身份验证期间您自己填充此信息。所有需要做的就是在类似Application_PostAuthenticationRequest事件的过程中手动设置主体。这应该会让你对它有个大概的了解。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|5120825|protected+void+Application_PostAuthenticateRequest(object+sender,+EventArgs+e)
{
++++//Obtain+username+and+roles+from+application+datastore+and+use+them+in+the+next+line
++++Thread.CurrentPrincipal+=+new+GenericPrincipal(
++++++++new+GenericIdentity("userNameHere"),
++++++++new+string[]+{+"Admin",+"CanDeleteStuff",+"CanEditStuff",+"OtherRole"+}
++++);
}|code-block|syntax|javascript|5120826|这将允许您在web.config中使用类似以下内容|5120827|<location+path="elmah.axd"+inheritInChildApplications="false">
++<system.web>
++++<authorization>
++++++<allow+roles="Elmah"/>
++++++<deny+users="*"/>
++++</authorization>
++</system.web>
</location>|5120828|更不用说能够在代码中使用User.IsInRole("CanEditStuff")了。|5120829|entityMap^0|27|11|0|0|6|A|0|0|C|T|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|M|3|N|5|H|7|Z|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|10|8|@$9|11|A|12|B|C]]|D|@]|E|$]]|$1|Q|3|-4|5|6|7|13|8|@]|D|@]|E|$]]]|R|$]]

It doesn't matter how the system gets the username or roles in this case. Whether it be from the built-in providers, a provider you implement yourself, or if during your custom authentication you populate this information yourself. All it takes is to manually set the principal during something like the <code>Application_PostAuthenticationRequest</code> event. This should give you the jist of it.

<pre><code>protected void Application_PostAuthenticateRequest(object sender, EventArgs e)
{
 //Obtain username and roles from application datastore and use them in the next line
 Thread.CurrentPrincipal = new GenericPrincipal(
 new GenericIdentity("userNameHere"),
 new string[] { "Admin", "CanDeleteStuff", "CanEditStuff", "OtherRole" }
 );
}
</code></pre>

This will let you use something like this in your <code>web.config</code>

<pre><code>&lt;location path="elmah.axd" inheritInChildApplications="false"&gt;
 &lt;system.web&gt;
 &lt;authorization&gt;
 &lt;allow roles="Elmah"/&gt;
 &lt;deny users="*"/&gt;
 &lt;/authorization&gt;
 &lt;/system.web&gt;
&lt;/location&gt;
</code></pre>

Not to mention being able to use <code>User.IsInRole("CanEditStuff")</code> in your code.

blocks|key|1288931|text|我使用的是ASP.NET身份框架，所以这个答案是关于该设置的。我还在NuGet中使用了Elmah.MVC包。我在web.config中编辑了以下代码行。(您需要在allowedUser设置中提供您自己的用户名)|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1288932|<add+key="elmah.mvc.requiresAuthentication"+value="true"+/>
<add+key="elmah.mvc.allowedRoles"+value="*"+/>
<add+key="elmah.mvc.allowedUsers"+value="your_user_name"+/>|code-block|syntax|javascript|1288933|看起来ELMAH确实从当前线程主体获得了身份验证信息，ASP.NET身份框架将在登录时代表您建立该主体。|1288934|entityMap^0|29|B|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|S|8|@]|D|@]|E|$]]|$1|M|3|-4|5|6|7|T|8|@]|D|@]|E|$]]]|N|$]]

I was using the ASP.NET Identity Framework, so this answer is regarding that setup. I also used the Elmah.MVC package in NuGet. I edited the following lines in web.config. (you need to supply your own user name in the <code>allowedUser</code> setting)

<pre><code>&lt;add key="elmah.mvc.requiresAuthentication" value="true" /&gt;
&lt;add key="elmah.mvc.allowedRoles" value="*" /&gt;
&lt;add key="elmah.mvc.allowedUsers" value="your_user_name" /&gt;
</code></pre>

It appears that ELMAH does get the authentication information from the current thread principal, which the ASP.NET Identity Framework will establish on your behalf upon login.

How can I configure ELMAH to display only for certain people without default ASP.NET authorization roles manager?

I (as well as many others, I think) use my own authorization logic and build my projects from zero without using provided templates. I want to log errors but it seems that it is impossible to configure ELMAH (somehow override functionality) to make it work with some other authorization or even to make it work only for particular IP addresses.

Since I will have access to <code>web.config</code> I tried to change these values in order to NOT display elmah by default.

<pre><code>&lt;add key="elmah.mvc.disableHandler" value="false" /&gt;
&lt;add key="elmah.mvc.disableHandleErrorFilter" value="false" /&gt;
&lt;add key="elmah.mvc.requiresAuthentication" value="false" /&gt;
</code></pre>

And when I want to view errors switch them from <code>true</code> to <code>false</code> and see errors, then switch back. But it seems that when I change these values all logs are erased.

What can I do?

Configuring custom authorization with ELMAH

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

如何在没有默认ASP.NET授权角色管理器的情况下将ELMAH配置为仅对某些人显示？我(以及其他许多人，我认为)使用自己的授权逻辑，从零开始构建我的项目，而不使用提供的模板。我想要记录错误，但似乎不可能配置ELMAH (以某种方式覆盖功能)来使其与其他授权一起工作，甚至使其仅对特定的IP地址工作。由于我将可以访问web...

问使用ELMAH配置自定义授权
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用ELMAH配置自定义授权EN