public static MvcHtmlString SecureActionLink(this HtmlHelper htmlHelper, string linkText, string actionName, string controllerName = null, object routeValues = null, object htmlAttributes = null)
{
if (!ControllerAuth.HasActionPermission(htmlHelper, actionName, controllerName))
{
return(MvcHtmlString.Empty);
}
return(htmlHelper.ActionLink(linkText, actionName, controllerName, routeValues, htmlAttributes));
}
public static MvcHtmlString SecureActionImageLink(this AjaxHelper ajaxHelper, string imgSrc, string alt, string actionName, string controllerName, AjaxOptions ajaxOptions, object routeValues = null, object htmlAttributes = null, object imgHtmlAttributes = null)
{
if (!ControllerAuth.HasActionPermission(ajaxHelper, actionName, controllerName))
{
return(MvcHtmlString.Empty);
}
var builder = new TagBuilder("img");
builder.MergeAttribute("src", imgSrc);
builder.MergeAttribute("alt", alt);
var link = ajaxHelper.ActionLink("[replaceme]", actionName, routeValues, ajaxOptions).ToHtmlString();
return(MvcHtmlString.Create(link.Replace("[replaceme]", builder.ToString(TagRenderMode.SelfClosing))));
}
public static MvcHtmlString SecureActionImageLink(this HtmlHelper htmlHelper, string imgSrc, string alt, string actionName, string controllerName, object routeValues, object htmlAttributes, object imgHtmlAttributes)
{
if (!ControllerAuth.HasActionPermission(htmlHelper, actionName, controllerName))
{
return(MvcHtmlString.Empty);
}
UrlHelper urlHelper = ((Controller)htmlHelper.ViewContext.Controller).Url;
TagBuilder imgTag = new TagBuilder("img");
imgTag.MergeAttribute("src", imgSrc);
imgTag.MergeAttributes((IDictionary <string, string>)imgHtmlAttributes, true);
string url = urlHelper.Action(actionName, controllerName, routeValues);
TagBuilder imglink = new TagBuilder("a");
imglink.MergeAttribute("href", url);
imglink.InnerHtml = imgTag.ToString();
imglink.MergeAttributes((IDictionary <string, string>)htmlAttributes, true);
return(new MvcHtmlString(imglink.ToString()));
}