asp.net - URL Verification in multi-tenant architecture -


What is the best way to verify the URL in a multi-tenant architecture web-app to ensure that the user organization Does not access data from another organization, just by changing the query string parameters. I do not want to do a verification on each page load. The app is being made on APP 3.5.

You should not actually control access to data based on the URL. You should restrict data access through user authentication and unfortunately this means that you have to verify on every data load, or more specifically on each data access.


Comments

Popular posts from this blog

python - Overriding the save method in Django ModelForm -

html - CSS autoheight, but fit content to height of div -

qt - How to prevent QAudioInput from automatically boosting the master volume to 100%? -