页面权限设计思路简析

1、用户对象设计

    public class User
    {
        public string UserName { get; set; }
        public string Password { get; set; }
        //权限管理
        public List<string> Permission { get; private set; }
        public bool CheckPermission(string code)
        {
            if (this.Permission != null && this.Permission.Contains(code))
            {
                return true;
            }
            return false;
        }
        /// <summary>
        /// 加入权限
        /// </summary>
        /// <param name="code"></param>
        public void SetPermission(string code)
        {
            if (this.Permission == null)
            {
                this.Permission = new List<string>();
            }
            this.Permission.Add(code);
        }
    }

2、扩展Html.Authorize（扩展方法）

    public static class AuthorizeExtensions
    {
        public static bool IsAuthorized(this HtmlHelper helper, string permissionCode)
        {
            return UserService.GetCurrentUser().CheckPermission(permissionCode);
        }

        public static string Authorize(this string html, string permissionCode)
        {
            if (UserService.GetCurrentUser().CheckPermission(permissionCode);)
            {
                return html;
            }
            else
            {
                return string.Empty;
            }
        }


        public static IHtmlString Authorize(this IHtmlString html, string permissionCode)
        {
            if (UserService.GetCurrentUser().CheckPermission(permissionCode);)
            {
                return html;
            }
            else
            {
                return MvcHtmlString.Empty;
            }
        }
    }

3、用例

                            @if (Html.IsAuthorized(Utility.AuthConst.IcsonCodeAddVirtualQty))
                            {
                                   <a onclick="XX">
                                        查看</a>
                            }