自己实现AOP的权限管理的代码-CSDN博客

using System;
using System.Collections.Generic;
using System.Reflection;
using System.Linq;
using System.Text;
using System.Runtime.Remoting.Contexts;
using System.Runtime.Remoting.Activation;
using System.Runtime.Remoting.Messaging;

namespace LiangQ.Authentification
{
#region 自定义Aspect,实际意义就是一个消息接收器,加入到消息处理管道中
internal class AuthAspect:IMessageSink
{
private IMessageSink m_next;
internal AuthAspect(IMessageSink next)
{
m_next = next;
}
public IMessageSink NextSink
{
get { return m_next; }
}
public IMessageCtrl AsyncProcessMessage(IMessage msg, IMessageSink replySink)
{
throw new InvalidOperationException();
}
public IMessage SyncProcessMessage(IMessage msg)
{
if (!authManage(msg))//权限处理函数
{
throw new InvalidOperationException("你没有权限执行这个功能");
}
IMessage returnMessage = m_next.SyncProcessMessage(msg);
return returnMessage;
}
private bool authManage(IMessage msg)//权限处理函数
{
if (!(msg is IMethodMessage)) return true;
IMethodMessage call = msg as IMethodMessage;
//Type type = Type.GetType(call.TypeName);
//string callStr = type.Name + "." + call.MethodName ;

//Console.WriteLine(callStr);

string needProfile="max", profile=" ",methodName;
//获取自定义属性的参数
string[] typeName = call.TypeName.Split(',');

string className = typeName[0];

Type t = Type.GetType(className);

MethodInfo m = t.GetMethod(call.MethodName);

foreach (object attr in m.GetCustomAttributes(true))
{
if (attr is AuthAttribute)
{
profile = ((AuthAttribute)attr).ProfileName;
}
}

//获取函数名
methodName = call.MethodName;
//假设通过一定方法可以获取到执行这个函数所需要的权限对象名称
needProfile = "admin";

if (profile == needProfile)
{
return true;
}
else return false;
}
}
#endregion
#region 自定义的权限检查属性
[AttributeUsage(AttributeTargets.All)]
public class AuthAttribute:ContextAttribute
{
private string profileName;
public AuthAttribute()
: base("Auth")
{
}
public AuthAttribute(string profile)
: base("Auth")
{
this.profileName = profile;
}
public string ProfileName
{
get { return this.profileName; }
}
public override void GetPropertiesForNewContext(IConstructionCallMessage ctorMsg)
{
ctorMsg.ContextProperties.Add(new AuthProperty());
}
}
#endregion //自定义的权限检查属性
public class AuthProperty : IContextProperty, IContributeObjectSink
{
public IMessageSink GetObjectSink(MarshalByRefObject o, IMessageSink next)
{
return new AuthAspect(next);
}
public string Name
{
get { return "AuthProperty"; }
}
public void Freeze(Context newContext)
{
}
public bool IsNewContextOK(Context newCtx)
{
return true;
}
}
}

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;

namespace LiangQ.Authentification
{
class Program
{
static void Main(string[] args)
{
UserInterface t = new UserInterface();
try
{
t.printReport();
}
catch (Exception e)
{
Console.WriteLine(e.Message);
}
Console.Read();
}
}
[Auth()]
public class UserInterface : ContextBoundObject
{
[Auth("simpleUser")]
public void printReport()
{
Console.WriteLine("I am Liang-Q");
}
}
}
觉得还是很有意思的一件事情，这样做可以减少大量的权限检查的代码，也使得权限的可配置性更强。