Base solution for your next web application
Open Closed

Restrict user for access from host user account #10671

User avatar
0
shedspotter created

What is your product version? 10.3.0

What is your product type (Angular or MVC)? Angular

What is product framework type (.net framework or .net core)? .NET 5

Hi we have enable the multi tenancy in our application, where every tenant will get a specific unique tenant login URL. For example : I have registered a tenant with name "taritas" so the URL which is generating is "taritas.anywhereapp.in" which is correct and for the super admin the URL which is generated is "host.anywhereapp.in" but some user which is the part of the tenant "taritas" is able to login from "host.anywhereapp.in" instated of "taritas.anywhereapp.in" but in that case still they are able to see the data of only there tenant. so please let me know how can we prevent user for login from super admin URL "host.anywhereapp.in" and user will only be able to login with there tenant specific unique URL.

Thanks

Go to accepted answer
8 Answer(s)
  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi @shedspotter

    Normally a user in a tenant shouldn't be able to login to host account. Is there a duplicate account in host side for that specific user ? If not, could you share on of the user's credentials with [email protected] ?

    Thanks,

  • User Avatar
    0
    shedspotter created

    Hi ismcagdas , sorry but we can not share the credientials of our user but we can show you the screen shot from clarity in which you can see that the user is using host.anywhereapp.io

    Thanks

  • User Avatar
    0
    shedspotter created

    Hi @ismcagdas is there any update on this ? Thanks

  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi @shedspotter

    Could you remove the client side cookies when you visit host.anywhereapp.io and see if it works that way ?

    Thanks,

  • User Avatar
    0
    shedspotter created

    Hi @ismcagdas, If I visit host.anywhereapp.io it will remove the cookies from my browser not from the user's browser . user will still use host.anywhereapp.io.

    Thanks

  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi,

    Thanks. Could you lastly share the Request Headers for the Authanticate request as shown below ?

    If we can't identify the problem, we can arrange a remote meeting to solve this problem.

    Thanks,

  • User Avatar
    0
    shedspotter created

    Hi ismcagdas, I am unable to share you the Request Headers for the Authanticate as we do not have any creadieals of the customer and the issue is occures to few of the customer, we can only share the details which we can access through DB.

    Thanks

  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi @shedspotter

    Could you send an email to [email protected] about this ? We can arrange a meeting and check it togeher on your environment.

Assignee
No one
Labels
None yet