public ApiMessage UpdateUserRoles()
        {
            ApiMessage message = new ApiMessage() { Status = "ok" };
            HttpContextBase context = (HttpContextBase)Request.Properties["MS_HttpContext"];
            HttpRequestBase request = context.Request;
            string user_id = User.Identity.Name;
            UserManager userMgr = new UserManager(int.Parse(user_id), null);
            BUser user = userMgr.CurrentUser;
            PermissionManagement permissionMgt = new PermissionManagement(userMgr.CurrentUser, userMgr.Shop, userMgr.CurrentUserPermission);
            int[] role_id = null;
            int uid = 0;

            int.TryParse(request["user"], out uid);
            try
            {
                role_id = this.ConvertToIntArrar(request["roles"]);
                if (role_id != null && role_id.Length > 0)
                {
                    permissionMgt.UpdateUserRoles(role_id, uid);
                }
                else
                {
                    message.Status = "failed";
                    message.Message = "请选择正确的权限分组";
                }
            }
            catch (KMJXCException kex)
            {
                message.Status = "failed";
                message.Message = kex.Message;
            }
            catch
            {
            }
            finally
            {

            }
            return message;
        }