扩展ASP.NET MEMBERSHIP权限功能(二 )

　　前一篇介绍了需求，和数据库结构与网站和项目结构

 

　　这一篇主要介绍一下网站结构和配置

　　admin下面的web.config

<?xml version="1.0"?>
<configuration>
  <configSections>
    <section name="Permission" type="EC.Permissions.Config"/>
  </configSections>
    <appSettings/>
    <connectionStrings/>
  <system.web>
    <authorization>
      <deny users="?" />
    </authorization>
  </system.web>
</configuration>

 

 

　　EC.Permissions.Config主要是实现了IConfigurationSectionHandler接口，来完成自定义的配置

 

 　　admin/test下面 web.config

　　

<? xml version = " 1.0 " ?>
<?xml version="1.0"?>
<configuration>
  <Permission type="EC.Permissions.PermissionInfo">
    <ModulePath>account</ModulePath>
    <ModuleName>test</ModuleName>
    <Items>
      <Item>
        <Page>Default.aspx</Page>
        <Function>列表</Function>
        <Val>2</Val>
      </Item>
      <Item>
        <Page>Default.aspx</Page>
        <Function>编辑</Function>
        <Val>16</Val>
      </Item>
      <Item>
        <Page>Default.aspx</Page>
        <Function>删除</Function>
        <Val>32</Val>
      </Item>
      <Item>
        <Page>Ok.aspx</Page>
        <Function>测试</Function>
        <Val>2</Val>
      </Item>
    </Items>
  </Permission>
</configuration>

 

 

　　1.串行化 web.config

　　EC.Permissions.Config 类

using  System;
using  System.Collections.Generic;
using  System.Linq;
using  System.Text;
using  System.Configuration;
using  System.Xml;
using  System.Xml.Serialization;
using  System.IO;

namespace  EC.Permissions
{
     public   class  Config : IConfigurationSectionHandler
    {
         #region  IConfigurationSectionHandler Members

         public   object  Create( object  parent,  object  configContext, System.Xml.XmlNode section)
        {
             // EC.Permissions.PermissionInfo
             string  typeName  =  ((XmlElement)section).GetAttribute( " type " );
            Type type  =  Type.GetType(typeName);
            XmlSerializer xz  =   new  XmlSerializer(type);
             using  (StringReader sr  =   new  StringReader(section.OuterXml))
            {
                 return  xz.Deserialize(sr);
            }
        }

         #endregion
    }
}

 

 

　　2.EC.Permissions.PermissionInfo类

　　

using  System;
using  System.Collections.Generic;
using  System.Linq;
using  System.Text;
using  System.Xml.Serialization;

namespace  EC.Permissions
{

    [Serializable]
    [XmlRoot( " Permission " )]
     public   class  PermissionInfo
    {
         ///   <summary>
         ///  权限数据库ID
         ///   </summary>
         public   int  PermissionId {  get ;  set ; }

         ///   <summary>
         ///  用户组ID
         ///   </summary>
         public   string  RoleId {  get ;  set ; }

         ///   <summary>
         ///  用户组名
         ///   </summary>
         public   string  RoleName {  get ;  set ; }

         ///   <summary>
         ///  模块路径
         ///   </summary>
        [XmlElement( " ModulePath " ,  typeof ( string ))]
         public   string  ModulePath {  get ;  set ; }

         ///   <summary>
         ///  模块名字
         ///   </summary>

        [XmlElement( " ModuleName " ,  typeof ( string ))]
         public   string  ModuleName {  get ;  set ; }

         ///   <summary>
         ///  权限值
         ///   </summary>
         public  PermissionType PermissionValue {  get ;  set ; }

        [XmlArrayItem( " Item " ,  typeof (PermissionItemInfo))]
         public  PermissionItemInfo[] Items {  get ;  set ; }
    }

    [Serializable]
    [XmlRoot( " Items " )]
     public   class  PermissionItemInfo
    {
        [XmlElement( " Page " ,  typeof ( string ))]
         public   string  Page {  get ;  set ; }

        [XmlElement( " Function " ,  typeof ( string ))]
         public   string  Function {  get ;  set ; }

        [XmlElement( " Val " ,  typeof ( int ))]
         public   int  Value {  get ;  set ; }

         public   override   bool  Equals( object  obj)
        {
             if  (obj  ==   null )
                 return   false ;

             if  ( this .GetType()  !=  obj.GetType())
                 return   false ;

             if  (((PermissionItemInfo)obj).Page  ==   this .Page)  return   true ;


             return   base .Equals(obj);
        }
    }

     ///   <summary>
     ///  权限类型
     ///   </summary>
     public   enum  PermissionType
    {
        ALL = 0 ,
        LIST = 2 ,
        VIEW = 4 ,
        ADD = 8 ,
        EDIT = 16 ,
        DELETE = 32 ,
        PRINT = 64
    }
}

 

 　　3.EC.Permissions.DAL 数据库访问

　　

using  System;
using  System.Collections.Generic;
using  System.Linq;
using  System.Text;
using  System.Collections;
using  System.Web.Security;
using  System.Data;
using  EC.DBUtility;
using  System.Data.SqlClient;
using  System.Configuration;
using  System.Web;

namespace  EC.Permissions
{
     public   class  DAL
    {
         private   static  DataAccessManager dataAccessManager  =   new  DataAccessManager();

         ///   <summary>
         ///  判断页面是否有此权限
         ///  1.得到当前用户所有的用户组
         ///  2.得到所有用户组的权限并取并集
         ///   </summary>
         ///   <param name="type"></param>
         ///   <returns></returns>
         public   static   bool  CheckPage()
        {
             bool  bResult  =   false ;

            PermissionInfo pi  =  GetPermissionInfo;
             if  (pi  ==   null )
                 return   true ;

            Hashtable ht  =  GetPermissionsByRole();

             if  (ht.Count  >   0 )
            {
                 string  key  =   string .Format( " M-{0} " , FolderPath);
                 if  (ht.ContainsKey(key))
                {
                     string  filename  =  GetFileName;
                     // 拆箱取出并判断权限
                    PermissionInfo ht_PermissionInfo  =  (PermissionInfo)ht[key];

                     foreach  (PermissionItemInfo temp  in  pi.Items)
                    {
                         if  (temp.Page.ToLower().Equals(filename)  &&  ((Convert.ToInt32(ht_PermissionInfo.PermissionValue) & temp.Value) == temp.Value))
                        {
                            bResult  =   true ;
                             break ;
                        }
                    }
                }
            }

             return  bResult;
        }



         ///   <summary>
         ///  判断按钮是否有此权限
         ///  1.得到当前用户所有的用户组
         ///  2.得到所有用户组的权限并取并集
         ///   </summary>
         ///   <param name="type"></param>
         ///   <returns></returns>
         public   static   bool  CheckButton(PermissionType type)
        {

             bool  bResult  =   false ;

            Hashtable ht  =  GetPermissionsByRole();

             if  (ht.Count  >   0 )
            {
                 string  key  =   string .Format( " M-{0} " , FolderPath);
                 if  (ht.ContainsKey(key))
                {
                     // 拆箱取出并判断权限
                    PermissionInfo ht_PermissionInfo  =  (PermissionInfo)ht[key];

                    bResult  =  (ht_PermissionInfo.PermissionValue  &  type)  ==  type;
                }
            }

             return  bResult;
        }

        

         ///   <summary>
         ///  当前目录
         ///   </summary>
         public   static  String FolderPath
        {
             get
            {
                 string  paths  =  HttpContext.Current.Request.ServerVariables[ " SCRIPT_NAME " ].ToString();
                 return  paths.ToLower();
            }
        }


         ///   <summary>
         ///  获取当前访问页面地址
         ///   </summary>
         public   static   string  GetFileName
        {
             get
            {
                 string  paths =  HttpContext.Current.Request.ServerVariables[ " SCRIPT_NAME " ].ToString();
                 return  paths.Substring(paths.LastIndexOf( " / " )  +   1 ).ToLower();
            }
        }

         ///   <summary>
         ///  获取当前目录下权限配置集合
         ///   </summary>
         public   static  PermissionInfo GetPermissionInfo
        {
             get
            {
                 return  (PermissionInfo)ConfigurationManager.GetSection( " Permission " );
            }
        }

         ///   <summary>
         ///  得到所有用户组的权限并取并集
         ///   </summary>
         ///   <returns></returns>
         public   static  Hashtable GetPermissionsByRole()
        {
            Hashtable ht  =   new  Hashtable();

             string [] rolesArr = Roles.GetRolesForUser();
             string  roles  =   string .Join( " ',' " , rolesArr);
            roles  =   " ' "   +  roles  +   " ' " ;

            SqlParameter[] parms  =   new  SqlParameter[ 2 ]; 

            parms[ 0 ]  =   new  SqlParameter( " @roles " , SqlDbType.NVarChar);
            parms[ 0 ].Value  =  roles;
            parms[ 1 ]  =   new  SqlParameter( " @path " , SqlDbType.NVarChar);
            parms[ 1 ].Value  =  FolderPath;

             // 读取用户组的所有权限
             using  (IDataReader dr  =  dataAccessManager.ReadDatabase.ExecuteSpReader( " aspnet_Ex_GetPermissionByRoles " , parms))
            {
                 while  (dr.Read())
                {
                    PermissionInfo permissioninfo  =   new  PermissionInfo();
                    permissioninfo.PermissionId  =  Convert.ToInt32(dr[ " PermissionId " ]);
                    permissioninfo.RoleId  =  Convert.ToString(dr[ " RoleId " ]);
                    permissioninfo.ModulePath  =  Convert.ToString(dr[ " ModulePath " ]).ToLower();
                    permissioninfo.PermissionValue  =  (PermissionType)(dr[ " PermissionValue " ]);
                    permissioninfo.RoleName  =  Convert.ToString(dr[ " RoleName " ]);

                     string  key  =   string .Format( " M-{0} " , permissioninfo.ModulePath);

                     // 判断是存入了相同值
                     if  (ht.ContainsKey(key))
                    {
                         // 拆箱取出并判断，存最大权限
                        PermissionInfo ht_PermissionInfo  =  (PermissionInfo)ht[key];
                         if  (ht_PermissionInfo.PermissionValue  !=  permissioninfo.PermissionValue)
                        {
                            ht_PermissionInfo.PermissionValue  =  ht_PermissionInfo.PermissionValue  |  permissioninfo.PermissionValue;
                            ht[key]  =  ht_PermissionInfo;
                        }
                    }
                     else
                    {
                        ht.Add(key, permissioninfo);
                    }

                }

                dr.Close();
                
            }

             return  ht;
        }
    }
}

 

　

 

 　　至此 简易的框架搭建完成

 

　　下一篇 扩展ASP.NET MEMBERSHIP权限功能(三 )之权限控件

　　(效果图)

　　

　　

 

 

　　目录

　　扩展ASP.NET MEMBERSHIP权限功能(四 )之页面权限
　　扩展ASP.NET MEMBERSHIP权限功能(三 )之权限控件
　　扩展ASP.NET MEMBERSHIP权限功能(二 )
　　扩展ASP.NET MEMBERSHIP权限功能(一 )

 

转载于:https://www.cnblogs.com/hubj/archive/2010/05/14/1735654.html