Exemple #1
0
        // GET: Base
        protected override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            base.OnActionExecuting(filterContext);
            bool isExist = false;

            if (filterContext.HttpContext.Request.Cookies["LoginCookie"] != null)
            {
                object login = MemcachedHelper.GetMemcachedData(filterContext.HttpContext.Request.Cookies["LoginCookie"].Value);
                if (login != null)
                {
                    LoginUser = JsonSerializeHelper.JsonDeSerialize <UserInfo>(login.ToString());
                    isExist   = true;
                    MemcachedHelper.SetMemcachedData(filterContext.HttpContext.Request.Cookies["LoginCookie"].Value, login, DateTime.Now.AddMinutes(20));
                    if (LoginUser.UName == "jc")
                    {
                        return;
                    }
                    string urlPath    = Request.Url.AbsolutePath;
                    string httpMethod = Request.HttpMethod.ToUpper();
                    //spring的容器创建业务类的实例
                    IApplicationContext ctx = ContextRegistry.GetContext();
                    CUP.PE.OA.IBLL.IActionInfoService ActionInfoService = (CUP.PE.OA.IBLL.IActionInfoService)ctx.GetObject("ActionInfoService");
                    CUP.PE.OA.IBLL.IUserInfoService   UserInfoService   = (CUP.PE.OA.IBLL.IUserInfoService)ctx.GetObject("UserInfoService");
                    if (ActionInfoService.LoadEntities(u => u.Url == urlPath && u.HttpMethod == httpMethod).FirstOrDefault() != null)
                    {
                        var userInfo = UserInfoService.LoadEntities(u => u.ID == LoginUser.ID).FirstOrDefault();
                        //1.从用户→权限进行过滤
                        var user2Action = (from u in userInfo.R_UserInfo_ActionInfo
                                           select u).Where(u => u.ActionInfo.Url == urlPath && u.ActionInfo.HttpMethod == httpMethod).FirstOrDefault();
                        if (user2Action != null)
                        {
                            if (user2Action.IsPass == true)
                            {
                                return;
                            }
                            else
                            {
                                filterContext.Result = Redirect("/Error.html");
                            }
                        }
                        else
                        {
                            //2.从用户→角色→权限进行过滤
                            var user_Role_Action = (from u in userInfo.RoleInfo
                                                    from a in u.ActionInfo
                                                    where a.Url == urlPath && a.HttpMethod == httpMethod
                                                    select a).FirstOrDefault();
                            if (user_Role_Action != null)
                            {
                                return;
                            }
                            else
                            {
                                filterContext.Result = Redirect("/Error.html");
                                return;
                            }
                        }
                    }
                    else
                    {
                        filterContext.Result = Redirect("/Error.html");
                        return;
                    }
                }
            }
            if (!isExist)
            {
                filterContext.Result = Redirect("/Login/Index");
                return;
            }
        }