MSDN Magazine - September 2008 - (Page 47)

what makes the link show up first in the Site Collection Administration column of the Site Settings page. The Rights attribute, which I have included with a value of ManageWebs, is used by WSS to provide declarative security trimming. Therefore, only users who have the ManageWebs permission will see this link. This will be the case for site-collection owners as well as any users that the site-collection owner has added to the role of Audit Manager. When users navigate to AuditConfig.aspx, they see the UI in Figure 2. As you can see, this application page provides radio buttons to fully enable or disable auditing. You will also find a radio button for entering a selective mode where the user can choose exactly what activities are recorded with an audit log entry. The code that is behind the OK button of AuditConfig.aspx is pretty simple. It reads which radio button has been selected by the user and sets the audit flags for the current site collection to the appropriate value. Figure 2 AuditConfig.aspx Lets Users Configure Audit Logging Then it calls Update on the Audit property to record the changes into the Content Database: When you want to build a menu item dynamically, you need to SPSite siteCollection = this.Site; create a custom control class and also add a declarative Customif (radAuditingOff.Checked) { Action element to instantiate an instance of the control class in the siteCollection.Audit.AuditFlags = SPAuditMaskType.None; } correct place. Note how the following CustomAction element difif (radAuditingOnFull.Checked) { fers from the one I showed earlier: siteCollection.Audit.AuditFlags = SPAuditMaskType.All; } if (radAuditingOnSelective.Checked) { siteCollection.Audit.AuditFlags = GetSelectiveAuditingFlags(); } siteCollection.Audit.Update(); If the user has chosen the option for selective auditing configuration, there is a call to the GetSelectiveAuditingFlags utility method. It inspects all those checkboxes and uses bitwise OR operations to return an SPAuditTypeMask value that represents a combination of all the types of activities that the user has selected for auditing: private SPAuditMaskType GetSelectiveAuditingFlags() { SPAuditMaskType AuditFlags = SPAuditMaskType.None; if (chkAuditView.Checked) { AuditFlags |= SPAuditMaskType.View; } if (chkAuditUpdate.Checked) { AuditFlags |= SPAuditMaskType.Update; } // Repeat for Copy, Move, Delete, Undelete, CheckIn, CheckOut, // Search, Workflow, SecurityChange, ProfileChange, SchemaChange return AuditFlags; } Extending the Site Actions Menu I’ve provided navigation support so that users can get to the AuditLogViewer.aspx application page. This is a page designed for users in the role of auditor who want to see what activity has occurred on the site. I decided against putting another link on the Site Settings page because many of the users in the role of auditor may not necessarily be administrators and therefore may never go to the Site Settings page for any other reason. Therefore, adding navigation support using the custom Site Actions menu items seemed more intuitive. It also gives me a chance to show you how to create a flyout menu with programmatic security trimming. msdnmagazine.com The main difference with this CustomAction element is that it has been declared using a ControlClass attribute and a ControlAssembly attribute instead of a UrlAction element. This makes it possible to generate menu items dynamically using a custom control class such as the SiteActionsCustomSubMenu, which is used in the AuditingDemo project and is shown in the code in Figure 3. Note that a custom control class must inherit from the WebControl class supplied by the ASP.NET programming model. The CreateChildControls method provides dynamic security trimming. Note that the entire flyout menu is only shown to users who are either site-collection owners or who have been added to the Auditors or Audit Manager groups. The second menu item, which allows a user to navigate to the AuditConfig.aspx page, is further trimmed to exclude users in the Auditors group. This menu is only displayed to site-collection owners or users who have been added to the Audit Manager group. There is one more important point I want to make about creating a dynamic menu with a custom control class. Like a Web Part, a custom control class requires a SafeControl entry in the web.config file of the hosting Web application. Here, the STSDEV utility provides the support for adding this SafeControl. It adds the apSeptember 2008 47 http://msdnmagazine.com

Table of Contents Feed for the Digital Edition of MSDN Magazine - September 2008

MSDN Magazine - September 2008 Contents Toolbox CLR Inside Out Data Points Advanced Basics Office Space Cutting Edge Hierarchy ID New Features for Microsoft SQL Server 2008 Prism Data Services Advanced WPF Test Run Security Briefs Foundations { End Bracket }

MSDN Magazine - September 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.