sharepoint 2013 自定义列表eventhandle权限控制

记录一下如何在sharepoint server 2013自定义列表中，使用eventhandle控制自定义列表custom list的条目item权限。

///<summary>

        ///正在添加项.

        ///</summary>

        public override void ItemAdding(SPItemEventProperties properties)

        {

            base.ItemAdding(properties);

            SPSecurity.RunWithElevatedPrivileges(delegate()

            {

                if(properties.ListTitle =="工作日报")

                {

                    string DepartmentName ="";

                    if(properties.AfterProperties["Department"] !=null)

                    {

                       DepartmentName =properties.AfterProperties["Department"].ToString();

                    }

                    if (DepartmentName =="IT部门")

                    {

                       properties.ErrorMessage="该部门暂时不能填写日报！";

                       properties.Cancel =true;

                    }

                }

            });

        }

 

///<summary>

        ///已添加项.

        ///</summary>

        public override void ItemAdded(SPItemEventProperties properties)

        {

            base.ItemAdded(properties);

            SPSecurity.RunWithElevatedPrivileges(delegate()

            {

                if(properties.ListTitle =="工作日报")

                {

                    SPSite site=newSPSite(properties.SiteId);

                    SPWeb web=site.OpenWeb();

                   

                    web.AllowUnsafeUpdates = true;

                    SPList list =web.Lists[properties.ListId];

 

                    SPListItem item =list.GetItemById(properties.ListItemId);

 

                    //权限断开，并且移除掉其它权限

                    if(!item.HasUniqueRoleAssignments)

                    {

                       item.BreakRoleInheritance(false);

                    }

                    //添加用户权限

                    SPUser CurrentUser =web.EnsureUser(properties.UserLoginName);

                    SPRoleAssignment MyRoleAssignment =newSPRoleAssignment(CurrentUser);

                   MyRoleAssignment.RoleDefinitionBindings.Add(web.RoleDefinitions.GetByType(SPRoleType.Contributor));

                   item.RoleAssignments.Add(MyRoleAssignment);

 

                    //添加上级领导权限

 

                    //1.根据当前用户，获取到该用户的上级领导

                    SPList EmployRelationList= web.Lists["员工关系表"];

                    SPQuery query =newSPQuery();

                    query.Query = @"<Where><Eq><FieldRefName=""EmployeeId"" LookupId=""TRUE""/><Value Type=""User"">" +properties.CurrentUserId +"</Value></Eq></Where>";

                    SPListItemCollection sic =EmployRelationList.GetItems(query);

 

                    DataTable dt =sic.GetDataTable();

                    string LeaderUserId =string.Empty;

                    if (dt !=null &&dt.Rows.Count > 0)

                    {

                       LeaderUserId = dt.Rows[0]["Leader"].ToString();

                    }

                    //2.将当前上级领导添加到该项目权限中

                    if (LeaderUserId !=null &&LeaderUserId!="")

                    {

                       SPUser LeaderUser =web.EnsureUser(LeaderUserId);

                       MyRoleAssignment =newSPRoleAssignment(LeaderUser);

                       MyRoleAssignment.RoleDefinitionBindings.Add(web.RoleDefinitions.GetByType(SPRoleType.Reader));

                       item.RoleAssignments.Add(MyRoleAssignment);

                    }

                    item.Update();

                    web.Dispose();

                }

            });

        }