首页 > Web开发 > 详细

MVC权限验证过滤器

时间:2017-08-21 18:42:01      阅读:276      评论:0      收藏:0      [点我收藏+]
Action属性,权限设定属性  
  [AttributeUsage(AttributeTargets.Method, Inherited = true, AllowMultiple = false)]
    public class PurviewEnumAttribute : Attribute
    {
        public string PurviewString { get; set; }
 
        public PurviewEnumAttribute(string purview)
        {
            this.PurviewString = purview;
        }
    }

 


Action属性,权限验证属性
 
  [AttributeUsage(AttributeTargets.Method, AllowMultiple = false, Inherited = true)]
    public class SuperICAuthorizeAttribute : AuthorizeAttribute
    {
        public string[] ActionPowers { get; set; }
 
        public override void OnAuthorization(System.Web.Mvc.AuthorizationContext filterContext)
        {
            string controllerName = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName;
            string actionName = filterContext.ActionDescriptor.ActionName;
            object[] attributes = filterContext.ActionDescriptor.GetCustomAttributes(typeof(PurviewEnumAttribute), true);
            if (attributes != null && attributes.Count() > 0)
            {
                string power = (attributes[0] as PurviewEnumAttribute).PurviewString;
                this.ActionPowers = power.Split(new string[] { "," }, StringSplitOptions.RemoveEmptyEntries);
            }
            base.OnAuthorization(filterContext);
        }
 
        protected override bool AuthorizeCore(HttpContextBase httpContext)
        {
            if (httpContext == null)
            {
                return false;
            }
            if (ActionPowers == null)
            {
                return true;
            }
            if (ActionPowers.Length == 0)
            {
                return true;
            }
            // if (ActionPowers.Any(httpContext.User.IsInRole))  
            if (ActionPowers.Any((new string[]{"1","2","3","4"}).Contains))
            {
                return true;
            }
            else
            {
                return false;
            }
        }
    } 

 


使用:Index需要权限为2的才能够进入,SuperICAuthorize过滤器中验证是否具有2的权限
[PurviewEnum("2")]
[SuperICAuthorize]
public ActionResult Index() 

MVC权限验证过滤器

原文:http://www.cnblogs.com/shi2310/p/7405923.html

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!