角色权限（批量添加）

权限：权限以角色为主（RBAC:基于角色的权限管理  ）

设置权限在进行用户注册的时候把角色分配好

保证系统的安全,保证登录的合法，对数据进行保密

一个完整的系统分前台和后台，后台是针对管理的内部员工来使用的，注册的功能必须由后台的最高管理者来进行

权限一般分为四张表：

1、用户表：重点是角色ID

2、角色表（角色ID ，角色名）

3、权限表（权限ID、权限名、权限路径--/Home/Select）

4、角色权限关系表（主键ID，权限ID，角色ID）给角色划分权限

---创建数据库
CREATE DATABASE DbUserInfo

---使用数据库
USE DBUserInfo

---创建数据表用户表
CREATE TABLE T_User
(
	U_Id INT PRIMARY KEY IDENTITY,
	U_Name NVARCHAR(24),
	U_Password NVARCHAR(24),
	R_Id INT
)


---创建数据角色表
CREATE TABLE T_Role
(
	R_Id INT PRIMARY KEY IDENTITY,
	R_Name NVARCHAR(24)
)

--创建权限表
CREATE TABLE T_Limits
(
	L_Id int PRIMARY KEY IDENTITY,
	L_Name NVARCHAR(24),
	L_Url NVARCHAR(48)
)

---创建权限角色关系表
CREATE TABLE T_RelLimitRole
(
	T_Id INT PRIMARY KEY IDENTITY,
	R_Id INT,
	L_Id INT
)

dataReader登录返回：

        /// <summary>
        /// 登录
        /// </summary>
        /// <param name="name"></param>
        /// <param name="pwd"></param>
        /// <returns></returns>
        public Users UserLogin(string name, string pwd)
        {
            conn.Open();
            string sql = "select U_Name,U_Password,R_Id from T_User where U_Name='"+name+"' and U_Password='"+pwd+"'";
            SqlCommand com = new SqlCommand(sql, conn);
            var res = com.ExecuteReader();
            Users use = new Users();
            while (res.Read())
            {
                use.U_Name = res["U_Name"].ToString();
                use.U_Password = res["U_Password"].ToString();
                use.R_Id = Convert.ToInt32(res["R_Id"]);
            }
            res.Close();
            conn.Close();
            return use;
        }

根据角色判断登录：

/// <summary>
        /// 登录操作
        /// </summary>
        /// <param name="name"></param>
        /// <param name="pwd"></param>
        /// <returns></returns>
        [HttpPost]
        public JsonResult UserLogin(string name,string pwd)
        {
            var res = new BLL.UserBll().UserLogin(name, pwd);
            Session["rid"] = res.R_Id;//session保存需要的角色id
            if (res != null)
            {
                if (res.R_Id == 1)
                {
                    return Json(new { code = 1, message = "校长登录成功" });
                }
                else if (res.R_Id == 2)
                {
                    return Json(new { code = 2, message = "主任登录成功" });
                }
                else if (res.R_Id == 3)
                {
                    return Json(new { code = 3, message = "讲师登录成功" });
                }
                else if (res.R_Id == 4)
                {
                    return Json(new { code = 4, message = "辅导员登录成功" });
                }
                else
                {
                    return Json(new { code = 5, message = "登录成功" });
                }
            }
            else {
                return Json(new { code = 0, message = "登录失败" });
            }
        }

显示权限：

     /// <summary>
        /// 权限
        /// </summary>
        /// <param name="lid"></param>
        /// <returns></returns>
        public List<Limite> GetLimit(int rid)
        {
            string sql = "SELECT * FROM T_Limits WHERE 1=1";
            if (rid!=0)
            {
                sql += "and L_Id IN (SELECT L_Id FROM T_RelLimitRole WHERE R_Id = "+rid+")";
            }
            SqlDataAdapter ada = new SqlDataAdapter(sql,conn);
            DataTable dt = new DataTable();
            ada.Fill(dt);
            var res = JsonConvert.SerializeObject(dt);
            var list = JsonConvert.DeserializeObject<List<Limite>>(res);
            return list;
        }

        /// <summary>
        /// 母版
        /// </summary>
        /// <returns></returns>
        [HttpPost]
        public JsonResult NavLimit()
        {
            int rid = Convert.ToInt32(Session["rid"]);
            var res = new BLL.UserBll().GetLimit(rid);
            return Json(res);
        }

添加权限：

/// <summary>
        /// 删除权限
        /// </summary>
        /// <param name="rid"></param>
        /// <returns></returns>
        public int DelRef(int rid)
        {
            conn.Open();
            string sql = "delete T_RelLimitRole where R_Id="+rid;
            SqlCommand com = new SqlCommand(sql, conn);
            int res= com.ExecuteNonQuery();
            conn.Close();
            return res;
        }

        /// <summary>
        /// 添加权限
        /// </summary>
        /// <param name="r"></param>
        /// <returns></returns>
        public int AddRef(List<RefRoleLimit> r)
        {
            conn.Open();
            int res = 0;
            foreach (var item in r)
            {
                string sql = string.Format("insert into T_RelLimitRole values({0},{1})", item.R_Id, item.L_Id);
                SqlCommand com = new SqlCommand(sql, conn);
                res += com.ExecuteNonQuery();
            }
            conn.Close();
            return res;
        }

        /// <summary>
        /// 查询角色
        /// </summary>
        /// <returns></returns>
        public List<Role> GetRole()
        {
            string sql = "select * from T_Role";
            SqlDataAdapter ada = new SqlDataAdapter(sql, conn);
            DataTable dt = new DataTable();
            ada.Fill(dt);
            var res = JsonConvert.SerializeObject(dt);
            var list = JsonConvert.DeserializeObject<List<Role>>(res);
            return list;
        }

/// <summary>
        /// 添加权限页面
        /// </summary>
        /// <returns></returns>
        public ActionResult limit()
        {
            var res = new BLL.UserBll().GetRole();
            ViewBag.list = new SelectList(res, "R_Id", "R_Name");
            return View();
        }

        /// <summary>
        /// 删除原有权限
        /// </summary>
        /// <param name="rid"></param>
        /// <returns></returns>
        [HttpPost]
        public JsonResult Dellimit(int rid)
        {
            var res = new BLL.UserBll().DelRef(rid);
            if (res > 0)
            {
                return Json(new { code = 1 });
            }
            else
            {
                return Json(new { code = 0 , message = "失败" });
            }
        }
        /// <summary>
        /// 添加权限
        /// </summary>
        /// <param name="res"></param>
        /// <returns></returns>
        [HttpPost]
        public JsonResult limit(string res)
        {
            res = res.TrimEnd('|');
            string[] str = res.Split('|');
            if (str == null || str.Length == 0)
            {
                return Json(new { code = 0, message = "失败" });
            }
            else
            {
                List<RefRoleLimit> re = new List<RefRoleLimit>();
                foreach (var item in str)
                {
                    string[] s = item.Split(',');
                    if (s == null || s.Length == 0)
                    {
                        break;
                                              
                    }
                    else
                    {
                        RefRoleLimit roel = new RefRoleLimit();
                        roel.R_Id = Convert.ToInt32( s[0]);
                        roel.L_Id = Convert.ToInt32(s[1]);
                        re.Add(roel);
                    }
                    
                }
                if (new BLL.UserBll().AddRef(re) > 0)
                {
                    return Json(new { code = 1, message = "添加成功" });
                }
                else
                {
                    return Json(new { code = 0, message = "添加失败" });
                }
            }
           
        }

<script src="~/Scripts/jquery-1.10.2.min.js"></script>
<script>
    function Quan()
    {
        var rid = $("#R_Id").val();

        $.ajax({
            url: "/UserRole/Dellimit",
            type: "post",
            data: { rid: rid },
            success: function (Data) {
                if (Data.code == 1) {
                    var quan = ""
                    $(".Checkbox1:checked").each(function () {
                        var li = $(this).val();
                        quan += rid + "," + li + "|";
                    })

                    alert(quan);

                    $.ajax({
                        url: "/UserRole/limit",
                        type: "post",
                        data: { res: quan },
                        success: function (Data) {
                            if (Data.code == 1) {
                                alert(Data.message);
                            }
                            else {
                                alert(Data.message);
                            }
                        }
                    })
                }
                else {
                    alert(Data.message);
                }
            }
        })

        
    }
</script>

<h2>limit</h2>
@Html.DropDownList("R_Id", ViewBag.list as SelectList)<br />
<input class="Checkbox1" type="checkbox" value="1"/>沟通记录导入管理<br />
<input class="Checkbox1" type="checkbox" value="2" />沟通记录查询管理<br />
<input class="Checkbox1" type="checkbox" value="3" />家长评分综合管理<br />
<input class="Checkbox1" type="checkbox" value="4" />家长投诉查询管理<br />
<input class="Checkbox1" type="checkbox" value="5" />家长投诉管理<br />
<input class="Checkbox1" type="checkbox" value="6" />公告管理<br />
<input class="Checkbox1" type="checkbox" value="7" />班级管理<br />
<input class="Checkbox1" type="checkbox" value="8" />角色管理<br />
<input id="Button1" type="button" value="角色权限" onclick="Quan()"/>

这样添加权限就会把原有的权限删除，再重新添加权限

添加权限用到了批量添加