在Mvc中使用自定义属性进行权限判断

 

下面的代码参考了  AuthorizeAttribute  ，  实际中 if (!AuthorizeCore()) ｛。。。。。｝ 的代码根据实际情况进行改写，如自动跳转至登录，或我现在在DWZ中可以返回 JSON格式的数据等。

这样，至少可以做的是少写没必要的很多重复的代码了。

少写几行代码比什么都重要。

 /// <summary>

    /// 自定权限操作的方法 ， added by zbw911

    /// <example> [AllowPurviews] 至少要求登录</example>

    /// </summary>

    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false, Inherited = true)]

    public sealed class AllowPurviewsAttribute : ActionFilterAttribute

    {

        private string _purviews;



        private string[] _purviewsSplit = new string[0];

        public string Purviews

        {

            get { return _purviews; }

            set

            {

                _purviews = value;

                _purviewsSplit = SplitString(_purviews);

            }

        }



        public override void OnActionExecuting(ActionExecutingContext filterContext)

        {

            if (filterContext == null)

            {

                throw new ArgumentNullException("filterContext");

            }

            if (OutputCacheAttribute.IsChildActionCacheActive(filterContext))

            {

                throw new InvalidOperationException("在缓存状态下无法使用此特性");

            }



            var descriptor = filterContext.ActionDescriptor;



            bool allowAnonymous;



            if (!descriptor.IsDefined(typeof(AllowAnonymousAttribute), true))

            {

                ControllerDescriptor controllerDescriptor = filterContext.ActionDescriptor.ControllerDescriptor;



                allowAnonymous = controllerDescriptor.IsDefined(typeof(AllowAnonymousAttribute), true);

            }

            else

            {

                allowAnonymous = true;

            }



            if (allowAnonymous)

            {

                return;

            }



            if (!AuthorizeCore())

            {



                var json = new JsonResult();



                json.JsonRequestBehavior = JsonRequestBehavior.AllowGet;

                json.Data = "nono";



                filterContext.Result = json;



            }



        }



        private bool AuthorizeCore()

        {

            if (SessionAll.AdminInfo == null) return false;

            return SessionAll.AdminInfo.PurviewsKeys.Any(x => this._purviewsSplit.Contains(x));

        }



        internal static string[] SplitString(string original)

        {

            if (string.IsNullOrEmpty(original))

            {

                return new string[0];

            }

            IEnumerable<string> source =

                from piece in original.Split(new char[]

                {

                    ','

                })

                let trimmed = piece.Trim()

                where !string.IsNullOrEmpty(trimmed)

                select trimmed;

            return source.ToArray<string>();

        }

    }