扩展ASP.NET MEMBERSHIP权限功能(二 )

　　前一篇介绍了需求，和数据库结构与网站和项目结构

　　这一篇主要介绍一下网站结构和配置

　　admin下面的web.config

<?xml version="1.0"?>
<configuration>
  <configSections>
    <section name="Permission" type="EC.Permissions.Config"/>
  </configSections>
    <appSettings/>
    <connectionStrings/>
  <system.web>
    <authorization>
      <deny users="?" />
    </authorization>
  </system.web>
</configuration>

　　EC.Permissions.Config主要是实现了IConfigurationSectionHandler接口，来完成自定义的配置

 　　admin/test下面 web.config

　　

<?xml version="1.0"?>
<?xml version="1.0"?>
<configuration>
  <Permission type="EC.Permissions.PermissionInfo">
    <ModulePath>account</ModulePath>
    <ModuleName>test</ModuleName>
    <Items>
      <Item>
        <Page>Default.aspx</Page>
        <Function>列表</Function>
        <Val>2</Val>
      </Item>
      <Item>
        <Page>Default.aspx</Page>
        <Function>编辑</Function>
        <Val>16</Val>
      </Item>
      <Item>
        <Page>Default.aspx</Page>
        <Function>删除</Function>
        <Val>32</Val>
      </Item>
      <Item>
        <Page>Ok.aspx</Page>
        <Function>测试</Function>
        <Val>2</Val>
      </Item>
    </Items>
  </Permission>
</configuration>

　　1.串行化 web.config

　　EC.Permissions.Config 类

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Configuration;
using System.Xml;
using System.Xml.Serialization;
using System.IO;

namespace EC.Permissions
{
    public class Config : IConfigurationSectionHandler
    {
        #region IConfigurationSectionHandler Members

        public object Create(object parent, object configContext, System.Xml.XmlNode section)
        {
            //EC.Permissions.PermissionInfo
            string typeName = ((XmlElement)section).GetAttribute("type");
            Type type = Type.GetType(typeName);
            XmlSerializer xz = new XmlSerializer(type);
            using (StringReader sr = new StringReader(section.OuterXml))
            {
                return xz.Deserialize(sr);
            }
        }

        #endregion
    }
}

　　2.EC.Permissions.PermissionInfo类

　　

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Xml.Serialization;

namespace EC.Permissions
{

    [Serializable]
    [XmlRoot("Permission")]
    public class PermissionInfo
    {
        /// <summary>
        /// 权限数据库ID
        /// </summary>
        public int PermissionId { get; set; }

        /// <summary>
        /// 用户组ID
        /// </summary>
        public string RoleId { get; set; }

        /// <summary>
        /// 用户组名
        /// </summary>
        public string RoleName { get; set; }

        /// <summary>
        /// 模块路径
        /// </summary>
        [XmlElement("ModulePath", typeof(string))]
        public string ModulePath { get; set; }

        /// <summary>
        /// 模块名字
        /// </summary>

        [XmlElement("ModuleName", typeof(string))]
        public string ModuleName { get; set; }

        /// <summary>
        /// 权限值
        /// </summary>
        public PermissionType PermissionValue { get; set; }

        [XmlArrayItem("Item", typeof(PermissionItemInfo))]
        public PermissionItemInfo[] Items { get; set; }
    }

    [Serializable]
    [XmlRoot("Items")]
    public class PermissionItemInfo
    {
        [XmlElement("Page", typeof(string))]
        public string Page { get; set; }

        [XmlElement("Function", typeof(string))]
        public string Function { get; set; }

        [XmlElement("Val", typeof(int))]
        public int Value { get; set; }

        public override bool Equals(object obj)
        {
            if (obj == null)
                return false;

            if (this.GetType() != obj.GetType())
                return false;

            if (((PermissionItemInfo)obj).Page == this.Page) return true;


            return base.Equals(obj);
        }
    }

    /// <summary>
    /// 权限类型
    /// </summary>
    public enum PermissionType
    {
        ALL=0,
        LIST=2,
        VIEW=4,
        ADD=8,
        EDIT=16,
        DELETE=32,
        PRINT=64
    }
}

 　　3.EC.Permissions.DAL 数据库访问

　　

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Collections;
using System.Web.Security;
using System.Data;
using EC.DBUtility;
using System.Data.SqlClient;
using System.Configuration;
using System.Web;

namespace EC.Permissions
{
    public class DAL
    {
        private static DataAccessManager dataAccessManager = new DataAccessManager();

        /// <summary>
        /// 判断页面是否有此权限
        /// 1.得到当前用户所有的用户组
        /// 2.得到所有用户组的权限并取并集
        /// </summary>
        /// <param name="type"></param>
        /// <returns></returns>
        public static bool CheckPage()
        {
            bool bResult = false;

            PermissionInfo pi = GetPermissionInfo;
            if (pi == null)
                return true;

            Hashtable ht = GetPermissionsByRole();

            if (ht.Count > 0)
            {
                string key = string.Format("M-{0}", FolderPath);
                if (ht.ContainsKey(key))
                {
                    string filename = GetFileName;
                    //拆箱取出并判断权限
                    PermissionInfo ht_PermissionInfo = (PermissionInfo)ht[key];

                    foreach (PermissionItemInfo temp in pi.Items)
                    {
                        if (temp.Page.ToLower().Equals(filename) && ((Convert.ToInt32(ht_PermissionInfo.PermissionValue)&temp.Value)==temp.Value))
                        {
                            bResult = true;
                            break;
                        }
                    }
                }
            }

            return bResult;
        }



        /// <summary>
        /// 判断按钮是否有此权限
        /// 1.得到当前用户所有的用户组
        /// 2.得到所有用户组的权限并取并集
        /// </summary>
        /// <param name="type"></param>
        /// <returns></returns>
        public static bool CheckButton(PermissionType type)
        {

            bool bResult = false;

            Hashtable ht = GetPermissionsByRole();

            if (ht.Count > 0)
            {
                string key = string.Format("M-{0}", FolderPath);
                if (ht.ContainsKey(key))
                {
                    //拆箱取出并判断权限
                    PermissionInfo ht_PermissionInfo = (PermissionInfo)ht[key];

                    bResult = (ht_PermissionInfo.PermissionValue & type) == type;
                }
            }

            return bResult;
        }

        

        /// <summary>
        /// 当前目录
        /// </summary>
        public static String FolderPath
        {
            get
            {
                string paths = HttpContext.Current.Request.ServerVariables["SCRIPT_NAME"].ToString();
                return paths.ToLower();
            }
        }


        /// <summary>
        /// 获取当前访问页面地址
        /// </summary>
        public static string GetFileName
        {
            get
            {
                string paths= HttpContext.Current.Request.ServerVariables["SCRIPT_NAME"].ToString();
                return paths.Substring(paths.LastIndexOf("/") + 1).ToLower();
            }
        }

        /// <summary>
        /// 获取当前目录下权限配置集合
        /// </summary>
        public static PermissionInfo GetPermissionInfo
        {
            get
            {
                return (PermissionInfo)ConfigurationManager.GetSection("Permission");
            }
        }

        /// <summary>
        /// 得到所有用户组的权限并取并集
        /// </summary>
        /// <returns></returns>
        public static Hashtable GetPermissionsByRole()
        {
            Hashtable ht = new Hashtable();

            string[] rolesArr=Roles.GetRolesForUser();
            string roles = string.Join("','", rolesArr);
            roles = "'" + roles + "'";

            SqlParameter[] parms = new SqlParameter[2]; 

            parms[0] = new SqlParameter("@roles", SqlDbType.NVarChar);
            parms[0].Value = roles;
            parms[1] = new SqlParameter("@path", SqlDbType.NVarChar);
            parms[1].Value = FolderPath;

            //读取用户组的所有权限
            using (IDataReader dr = dataAccessManager.ReadDatabase.ExecuteSpReader("aspnet_Ex_GetPermissionByRoles", parms))
            {
                while (dr.Read())
                {
                    PermissionInfo permissioninfo = new PermissionInfo();
                    permissioninfo.PermissionId = Convert.ToInt32(dr["PermissionId"]);
                    permissioninfo.RoleId = Convert.ToString(dr["RoleId"]);
                    permissioninfo.ModulePath = Convert.ToString(dr["ModulePath"]).ToLower();
                    permissioninfo.PermissionValue = (PermissionType)(dr["PermissionValue"]);
                    permissioninfo.RoleName = Convert.ToString(dr["RoleName"]);

                    string key = string.Format("M-{0}", permissioninfo.ModulePath);

                    //判断是存入了相同值
                    if (ht.ContainsKey(key))
                    {
                        //拆箱取出并判断，存最大权限
                        PermissionInfo ht_PermissionInfo = (PermissionInfo)ht[key];
                        if (ht_PermissionInfo.PermissionValue != permissioninfo.PermissionValue)
                        {
                            ht_PermissionInfo.PermissionValue = ht_PermissionInfo.PermissionValue | permissioninfo.PermissionValue;
                            ht[key] = ht_PermissionInfo;
                        }
                    }
                    else
                    {
                        ht.Add(key, permissioninfo);
                    }

                }

                dr.Close();
                
            }

            return ht;
        }
    }
}

　

 　　至此 简易的框架搭建完成

　　下一篇 扩展ASP.NET MEMBERSHIP权限功能(三 )之权限控件

　　(效果图)

　　

　　

　　目录

　　扩展ASP.NET MEMBERSHIP权限功能(四 )之页面权限
　　扩展ASP.NET MEMBERSHIP权限功能(三 )之权限控件
　　扩展ASP.NET MEMBERSHIP权限功能(二 )
　　扩展ASP.NET MEMBERSHIP权限功能(一 )