sharepoint文档库权限控制

在某一项目中，用户有如下需求：用户上传到文档库的文件或是在文档库中新建的文件夹，他们能够自己设置权限，并且新上传的文件或是新建的文件夹对于自己来说拥有“完全控制权限”，对其他用户只拥有读取权限，该用户有权让其他用户拥有“参与讨论”或是“权限设置”的权限。

public class NewDocumentControlPermission : SPItemEventReceiver

    {

        public override void ItemAdded(SPItemEventProperties properties)

        {

            //base.ItemAdded(properties);

            try

            {

                SPSecurity.RunWithElevatedPrivileges( delegate ()

                {

                    using (SPSite site = new SPSite(properties.SiteId))

                    {

                        using (SPWeb web = site.OpenWeb(properties.OpenWeb().ID))

                        {

 

                            web.AllowUnsafeUpdates = true ;

 

                            SPUser user = web.Users.GetByID(properties.CurrentUserId);

                            SPListItem item = properties.ListItem;

                            //获得触发此事件的用户的登录名

                            SPRoleAssignment ra1 = new SPRoleAssignment(web.EnsureUser(user.LoginName));

                            ra1.RoleDefinitionBindings.Add(web.RoleDefinitions[ "完全控制" ]);

                            item.BreakRoleInheritance( true );

                            item.RoleAssignments.Add(ra1);

 

 

                            for ( int count = 0; count < item.RoleAssignments.Count; count++)

                            {

                                SPRoleAssignment spra = item.RoleAssignments[count];

                                for ( int i = 0; i < spra.RoleDefinitionBindings.Count; i++)

                                {

                                    //if (spra.RoleDefinitionBindings[i].Name == "受限访问")

                                    //{

                                    //    item.BreakRoleInheritance(true);

                                    //    item.RoleAssignments.Remove(spra.Member);

                                    //}

                                    if (spra.RoleDefinitionBindings[i].Name == "参与讨论" )

                                    {

                                        if (!spra.RoleDefinitionBindings.Contains(web.RoleDefinitions[ "读取" ]))

                                        {

                                            spra.RoleDefinitionBindings.Add(web.RoleDefinitions[ "读取" ]);

                                        }

                                        spra.RoleDefinitionBindings.Remove(web.RoleDefinitions[ "参与讨论" ]);

                                        //item.RoleAssignments[count].RoleDefinitionBindings[i].Update();

                                        spra.Update();

                                        item.SystemUpdate( false );

                                    }

                                    else if (spra.RoleDefinitionBindings[i].Name == "用户权限" )

                                    {

                                        if (!spra.RoleDefinitionBindings.Contains(web.RoleDefinitions[ "读取" ]))

                                        {

                                            spra.RoleDefinitionBindings.Add(web.RoleDefinitions[ "读取" ]);

                                        }

                                        spra.RoleDefinitionBindings.Remove(web.RoleDefinitions[ "用户权限" ]);

                                        //spra.RoleDefinitionBindings[i].Update();

                                        spra.Update();

                                        item.SystemUpdate( false );

                                    }

                                }

                            }

                            web.AllowUnsafeUpdates = false ;

                        }

                    }

                });

            }

            catch { }

        }

    }

另一个是针对于上传新文件的EventHandler,此EventHandler的写法与列表的EventHandler写法大不相同，废话少说，代码如下：

public class ControlPermission : IListEventSink

    {

        void IListEventSink.OnEvent(Microsoft.SharePoint.SPListEvent listEvent)

        {

            try

            {

                if (listEvent.Type == SPListEventType.Insert) //增加{}

                {

                    SPSecurity.RunWithElevatedPrivileges( delegate ()

                    {

                        SPWeb web = listEvent.Site.OpenWeb();

                        SPFile file = web.GetFile(listEvent.UrlAfter);

                        SPListItem item = file.Item;

 

                        //添加个人完全权限

 

                        SPUser user = file.Author;

                        SPRoleAssignment sa = new SPRoleAssignment((SPPrincipal)user);

                        SPRoleDefinition role = web.RoleDefinitions[ "完全控制" ];

                        sa.RoleDefinitionBindings.Add(role);

                        item.BreakRoleInheritance( true );

                        item.RoleAssignments.Add(sa);

 

                        //修改部门全体为读取权限

                        for ( int count = 0; count < item.RoleAssignments.Count; count++)

                        {

                            SPRoleAssignment spra = item.RoleAssignments[count];

                            for ( int i = 0; i < spra.RoleDefinitionBindings.Count; i++)

                            {

                                //if (spra.RoleDefinitionBindings[i].Name == "受限访问")

                                //{

                                //    item.BreakRoleInheritance(true);

                                //    item.RoleAssignments.Remove(spra.Member);

                                //}

                                if (spra.RoleDefinitionBindings[i].Name == "参与讨论" )

                                {

                                    if (!spra.RoleDefinitionBindings.Contains(web.RoleDefinitions[ "读取" ]))

                                    {

                                        spra.RoleDefinitionBindings.Add(web.RoleDefinitions[ "读取" ]);

                                    }

                                    spra.RoleDefinitionBindings.Remove(web.RoleDefinitions[ "参与讨论" ]);

                                    //item.RoleAssignments[count].RoleDefinitionBindings[i].Update();

                                    spra.Update();

                                    item.SystemUpdate( false );

                                }

                                else if (spra.RoleDefinitionBindings[i].Name == "用户权限" )

                                {

                                    if (!spra.RoleDefinitionBindings.Contains(web.RoleDefinitions[ "读取" ]))

                                    {

                                        spra.RoleDefinitionBindings.Add(web.RoleDefinitions[ "读取" ]);

                                    }

                                    spra.RoleDefinitionBindings.Remove(web.RoleDefinitions[ "用户权限" ]);

                                    //spra.RoleDefinitionBindings[i].Update();

                                    spra.Update();

                                    item.SystemUpdate( false );

                                }

                            }

                        }

                    });

                }

            }

            catch { }

        }

    }

 

 

转载于:https://www.cnblogs.com/tjsunyf/archive/2012/08/21/2648513.html