//----------------------------------------------------------------------
public static Boolean HasAction(User user, ISecurity objSecurity, ISecurityAction action, MvcContext ctx)
{
SecurityTool securityTool = ForumSecurityService.GetSecurityTool(objSecurity, ctx);
Boolean hasAction = securityTool.HasAction(user.Role, action);
if (hasAction)
{
return(true);
}
hasAction = securityTool.HasAction(user.Rank, action);
if (hasAction)
{
return(true);
}
if (ctx.owner.obj.GetType() != typeof(Site))
{
IRole roleInOwner = ctx.owner.obj.GetUserRole(user);
hasAction = securityTool.HasAction(roleInOwner, action);
if (hasAction)
{
return(true);
}
}
if (new ModeratorService().IsModerator(objSecurity as ForumBoard, user))
{
hasAction = securityTool.HasAction(ForumRole.Moderator, action);
if (hasAction)
{
return(true);
}
}
return(false);
}
//----------------------------------------------------------------------
public static IList GetTopicAdminCmds(User user, ForumBoard board, MvcContext ctx)
{
IList results = new ArrayList();
// 1、获取用户的角色
SecurityTool tool = ForumSecurityService.GetSecurityTool(board, ctx);
IList actions = tool.GetActionsByRole(user.Role);
addAdminActionsToResults(actions, results);
// 2、获取用户的等级
if (user.RankId > 0)
{
actions = tool.GetActionsByRole(user.Rank);
addAdminActionsToResults(actions, results);
}
// 3、owner的角色
if (ctx.owner.obj.GetType() != typeof(Site))
{
IRole roleInOwner = ctx.owner.obj.GetUserRole(user);
actions = tool.GetActionsByRole(roleInOwner);
addAdminActionsToResults(actions, results);
}
// 3、版主
ModeratorService moderatorService = new ModeratorService();
if (moderatorService.IsModerator(board, user))
{
IList moderatorActions = tool.GetActionsByRole(ForumRole.Moderator);
addAdminActionsToResults(moderatorActions, results);
}
return(results);
}
private static Boolean hasAction(ISecurity objSecurity, MvcContext ctx)
{
// 未提供权限配置的页面通过
if (objSecurity == null)
{
return(true);
}
SecurityTool securityTool = ForumSecurityService.GetSecurityTool(objSecurity, ctx); // objSecurity.SecurityTool;
// 不需要权限管理的页面通过
if (securityTool.IsForbiddenAction(ctx.route.getControllerAndActionPath()) == false)
{
return(true);
}
// 空页面——通过
String currentPath = ctx.url.Path;
if (strUtil.IsNullOrEmpty(currentPath))
{
return(true);
}
// 编辑权限例外：用户可以编辑自己的帖子
// 只要系统角色，或论坛角色之一具有权限，则用户具有权限（当用户具有多重身份之时）
// 1、获取用户的角色
//系统角色
SiteRole role = ((User)ctx.viewer.obj).Role;
IList actions = securityTool.GetActionsByRole(role);
if (hasAction_private(actions, ctx))
{
return(true);
}
// 2、获取用户在特定owner中的角色
if (ctx.owner.obj.GetType() != typeof(Site))
{
IRole roleInOwner = ctx.owner.obj.GetUserRole(ctx.viewer.obj);
IList ownerRoleActions = securityTool.GetActionsByRole(roleInOwner);
if (hasAction_private(ownerRoleActions, ctx))
{
return(true);
}
}
// 3、获取用户的等级
SiteRank rank = ((User)ctx.viewer.obj).Rank;
if (rank.Id > 0)
{
actions = securityTool.GetActionsByRole(rank);
if (hasAction_private(actions, ctx))
{
return(true);
}
}
// 4、是否在论坛担任角色
if (objSecurity is ForumBoard)
{
ModeratorService moderatorService = new ModeratorService();
if (moderatorService.IsModerator(objSecurity as ForumBoard, (User)ctx.viewer.obj))
{
IList moderatorActions = securityTool.GetActionsByRole(ForumRole.Moderator);
if (hasAction_private(moderatorActions, ctx))
{
return(true);
}
}
}
return(false);
}