MVC中如何利用filter实现权限管理

定义filter:

 

using  System;
using  System.Collections.Generic;
using  System.Linq;
using  System.Text;
using  System.Web.Mvc;
using  System.Web;
using  System.Web.Routing;
using  Vslea.Models;

namespace  Vslea.Filters
{
     public   class  RoleAttribute:ActionFilterAttribute,IAuthorizationFilter
    {
         public  RoleAttribute(RoleTypeEnum roleType)
        {
             this .RoleType  =  roleType;
        }
         public  RoleTypeEnum RoleType {  get ;  set ; }

         public   void  OnAuthorization(AuthorizationContext filterContext)
        {
            HttpContextBase b  =  filterContext.RequestContext.HttpContext;
            UserModel model  =  b.Session[ " User " ]  as  UserModel;
             if  (model  !=   null )
            {
                 if  (model.RoleType  !=   this .RoleType)
                {
                   filterContext.Result  =   new  RedirectToRouteResult( " default " ,  new  RouteValueDictionary( new  { controller  =   " Shared " , action  =   " Error "  })); 
                }
            }
        }
    }
}

 

在controller中：

 

        [AcceptVerbs(HttpVerbs.Get)]
        [Role(RoleTypeEnum.Admin)]
         public  ActionResult NewCustomer( int ?  customerId)
        {
        }

 

 

简单又方便，使代码结构更加清晰

转载于:https://www.cnblogs.com/JackFeng/archive/2010/08/11/1797205.html