コード例 #1
0
        public override void OnActionExecuting(HttpActionContext actionContext)
        {
            var controllerName = actionContext.ControllerContext.RouteData.Values["controller"].ToString();

            var method = (actionContext.ControllerContext.Request.Method).Method;
            var url    = controllerName + "/" + method;

            var userid   = HttpContext.Current.User.Identity.GetUserId();
            var userName = HttpContext.Current.User.Identity.Name.ToLower();

            if (userName != "admin")
            {//如果不是内置初始管理员,那么就走权限系统
             //不是登录登出,登录登出不走权限系统
                //检查用户是否有此action的权限,没有就跳转到提示无权限的页面
                bool check = SUBLL.CheckUserAction(userid, url);
                if (check == false)
                {
                    //跳转
                    HttpContext.Current.Response.Clear();



                    HttpContext.Current.Response.Write("2020");
                    HttpContext.Current.Response.End();
                }
            }

            base.OnActionExecuting(actionContext);
        }
コード例 #2
0
        public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            var controllerName = filterContext.RouteData.Values["controller"].ToString();
            var actionName     = filterContext.RouteData.Values["action"].ToString();
            var url            = controllerName + "/" + actionName;


            var userid   = HttpContext.Current.User.Identity.GetUserId();
            var userName = HttpContext.Current.User.Identity.Name.ToLower();

            if (url == "Home/Login" || url == "Home/login")
            {
                if (!string.IsNullOrEmpty(userName))
                {
                    HttpContext.Current.Response.Redirect("/Base/Default");
                }
            }


            if (userName != "admin")  //如果不是内置初始管理员,那么就走权限系统
            {
                if (
                    url.ToLower() != "home/login" &&
                    url.ToLower() != "home/logoff" &&
                    controllerName.ToLower() != "error" &&
                    url.ToLower() != "base/default" &&
                    controllerName.ToLower() != "noauth" &&
                    controllerName.ToUpper() != "AD" &&
                    controllerName.ToLower() != "simulatorrecharge"
                    )   //不是登录登出,登录登出不走权限系统
                //检查用户是否有此action的权限,没有就跳转到提示无权限的页面
                {
                    bool check = SUBLL.CheckUserAction(userid, url);
                    if (check == false)
                    {
                        //跳转
                        HttpContext.Current.Response.Redirect("/Error/NoPower?url=" + url);
                    }
                }
            }

            OnePointLogin();



            OperLog("/" + controllerName + "/" + actionName, filterContext, userName);



            base.OnActionExecuting(filterContext);
        }