//定义一个基类的AdminInfo对象
public override void OnActionExecuting(ActionExecutingContext filterContext)
{
AdminInfo currentUserInfo = filterContext.HttpContext.Session == null ? new AdminInfo() : filterContext.HttpContext.Session["AdminInfo"] as AdminInfo;
//先将当前的请求，到权限表里面去找对应的数据
//拿到当前请求的URL地址
string requestUrl = filterContext.HttpContext.Request.Path;
//拿到当前请求的类型
string requestType = filterContext.HttpContext.Request.RequestType.ToLower().Equals("get") ? "HttpGet" : "HttpPost";
//然后和权限表进行对比，如果取出来则通过请求，否则不通过
//取出当前权限的数据
var currentAction = _actioninfoService.Get(c => c.RequestUrl.Equals(requestUrl, StringComparison.InvariantCultureIgnoreCase) && c.RequestHttpType.Equals(requestType)).FirstOrDefault();
//如果没有权限对应当前请求的话，直接干掉
if (currentAction == null)
{
NoPermission(filterContext);
return;
}
//想去用户权限表里面查询有没有数据
//分析第一条线路 AdminInfo->R_UserInfo_ActionInfo->ActionInfo
//拿到当前的用户信息
var userCurrent = _adminInfoService.Get(u => u.ID == currentUserInfo.ID).FirstOrDefault();
var temp = (from r in userCurrent.R_AdminInfo_ActionInfo where r.ActionInfoID == currentAction.ID select r).FirstOrDefault();
if (temp != null)
{
if (temp.HasPermation)
{
return;
}
else
{
NoPermission(filterContext);
return;
}
}
//分析第二条线路 AdminInfo->ActionGroup->ActionInfo //拿到当前用户所有的组
var groups = from n in userCurrent.ActionGroup select n;
//根据组信息遍历出权限信息
bool isPass = (from g in groups from a in g.ActionInfo select a.ID).Contains(currentAction.ID);
if (isPass) //11，23，34不包含4
{
return;
}
//分析第三条线路 分为两个
//1)AdminInfo->R_UserInfo_Role->Role->ActionInfo
//先拿到用户对应的所有的角色
var userRoles = from r in userCurrent.R_AdminInfo_Role select r.Role;
//拿到角色对应的所有权限
var rolesaction = (from r in userRoles from a in r.ActionInfo select a.ID);
if (rolesaction.Contains(currentAction.ID))
{
return;
}
//2)AdminInfo->R_UserInfo_Role->Role->ActionGroup->ActionInfo
//拿到组信息
var roleGroupActions = from r in userRoles from g in r.ActionGroup select g;
//拿到所有的组信息
var groupActions = from r in roleGroupActions from g in r.ActionInfo select g.ID;
if (groupActions.Contains(currentAction.ID))
{
return;
}
}
/// <summary>
/// 绑定用户数据
/// </summary>
/// <param name="id"></param>
/// <returns></returns>
public JsonResult GetBindDetails(int id)
{
var userInfo = _adminInfoService.Get(u => u.ID == id).FirstOrDefault();
return(Json(userInfo, JsonRequestBehavior.AllowGet));
}