Does anyone know how to apply role based permissions to dynamically generated URL's? (This is for a dynamic data website application.)

For example, I want non admin users to "only" be able to access http://xxx/xxx/Inventory/List.aspx?xxx and http://xxx/xxx/Inventory/Edit.aspx?xxx

but not be able to access http://xxx/xxx/Model/List.aspx?xxx or
http://xxx/xxx/Model/Edit.aspx?xxx or
http://xxx/xxx/History/List.aspx?xxx, etc.

Inventory, Model, and History are table names. The URL's are auto generated via "routes.Add(New DynamicDataRoute("{table}/{action}.aspx")" in the global.asax file.

I can hide all the hyperlinks to the URL's I want blocked, and I can prevent "all" non-admin access to Details.aspx, Insert.aspx , etc., but I cannot figure out how to prevent access to specific dynamically generated URL's such as the ones above.

Thanks,

Jeff

I'm not sure if this is the best way to do it but I figured out a solution... don't register the control if the logged in user is not an admin, and the URL doesn't match the specified URL in which they are allowed access. If a non admin user tries to enter a restricted URL they get redirected back to the main unrestricted page.


Protected Sub Page_Init(ByVal sender As Object, ByVal e As EventArgs)

If Roles.IsUserInRole("Administrator") OrElse _
InStr(Request.Url.ToString(), "Inventory/List.aspx") Then
DynamicDataManager1.RegisterControl(GridView1, True)
Else
Response.Redirect("~/Inventory/List.aspx")
End If
End Sub


Jeff