ASP.NET MVC Authorization with jQuery & AJAX posting in IE

Question

I'm not sure how to post this question without including half of my sites code, but here goes.

I have a site with a Subcontract Form, a Company Form, and a Contact Form. From the subcontract form, you can create a new company and/or a new contact via buttons which open jQuery dialogs and post the company or contact information. From the company form, there is a button to create a new contact.

From subcontract form:

$('#popupCreateCompany').dialog(
        {
            autoOpen: false,
            modal: true,
            width: 600,
            open: function(event, ui) {
                if ($('#primary_company').val().length > 0) {
                    $('#secondary').attr('checked', 'true');
                }
                else {
                    $('#primary').attr('checked', 'true');
                    $('#sec').hide();
                }
            },
            buttons:
            {
                'Add': function() {
                    var dialog = $(this);
                    var form = dialog.find('input:text, select');
                    $.post('<%= ResolveUrl("~/company/post") %>', $(form).serialize(), function(data) {
                        if (data.Result == "success") { ...

.

$('#popupCreateContact').dialog(
        {
            autoOpen: false,
            modal: true,
            width: 600,
            buttons:
            {
                'Add': function() {
                    var dialog = $(this);
                    var form = dialog.find('input:text, select');
                    $.post('<%= ResolveUrl("~/contact/post") %>', $(form).serialize(), function(data) { ...

From the company form:

$('#popupCreateContact').dialog(
        {
            autoOpen: false,
            modal: true,
            buttons:
            {
                'Add': function() {
                    var dialog = $(this);
                    var form = dialog.find('input:text, select');
                    $.post('<%= ResolveUrl("~/contact/post") %>', $(form).serialize(), function(data) {
                        if (data.Result == "success") { ...

This functionality worked until we implemented some custom authorization to the site. Now, you can add a contact from the subcontract form, but you cannot add a company from the subcontract. You cannot add a contact from the company form. When you click "Add" nothing happens. I've added an alert before and after the $.post line and it hits the alert before, but not the alert after. Put a breakpoint at contact/post and it never gets there. The same Authorization groups have access to add subcontracts, companies, and contacts.

In the Company Controller:

[AcceptVerbs(HttpVerbs.Post), MarlowAuthorize(Roles = "Subcontract_Modify, Admin", ViewName = "AuthorizationError")]
    public JsonResult Post(company company)
    {
        if (ModelState.IsValid)
        {
            try
            {

The same contact post routine is called from the subcontract form as from the company form. But one works and the other doesn't. In the Contact Controller:

[AcceptVerbs(HttpVerbs.Post), MarlowAuthorize(Roles = "Subcontract_Modify, Admin", ViewName = "AuthorizationError")]
    public JsonResult Post(contact contact)
    {
        if (ModelState.IsValid)
        {
            try
            {

I've tried adding Authorization attributes to places in the controller and I've tried removing them. Whatever the combo I try, I get the same result. You can add a contact from the subcontract, but not a company. And, you cannot add a contact from the company. I keep thinking that knowing that will lead to me to see what the difference is somewhere, but I can't seem to find it.

EDIT Just went into Firefox to use Firebug and it appears that it's working in Firefox. But doesn't work in IE7 or IE8.

ZippyV · Accepted Answer · 2010-07-08 18:24:07Z

3

Use Fiddler and compare the differences in the data that Firefox and IE sends.

answered Jul 8, 2010 at 18:24

ZippyV

13.1k3 gold badges39 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

RememberME Over a year ago

I've never used Fiddler before. After I initially logon to my site, I don't see any new listings for it under "Web Sessions". I can see all of my stack overflow activity.

RememberME · Accepted Answer · 2010-07-09 18:23:28Z

0

Got it to work, but I'd be interested to know if anyone can explain the "why".

Changed this

var dialog = $(this);
var form = dialog.find('input:text, select');
$.post('<%= ResolveUrl("~/company/post") %>', $(form).serialize(), function(data) { ...

to

var dialog = $(this);
var form = $('#popupCreateCompany').find('input:text, select');
$.post('<%= ResolveUrl("~/company/post") %>', $(form).serialize(), function(data) { ...

and it now works in IE.

I don't understand why it worked until last week and why it still worked for the contact from subcontract, but not the company from subcontract or the contact from company.

answered Jul 9, 2010 at 18:23

RememberME

2,0924 gold badges38 silver badges62 bronze badges

Collectives™ on Stack Overflow

ASP.NET MVC Authorization with jQuery & AJAX posting in IE

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related