Пример #1
0
        protected void CheckAccess()
        {
            ViewBag.NotAllowed = false;
            AuthenticationBL BL  = new AuthenticationBL();
            string           url = HttpUtility.UrlDecode(Request.Url.PathAndQuery);

            if (Request.Url.Query != "")
            {
                url = url.Replace(Request.Url.Query, "");
            }
            if (url.ToLower().Contains("/dataready"))
            {
                url = url.Substring(0, url.ToLower().IndexOf("/dataready"));
            }
            if (url.ToLower().Contains("/window"))
            {
                url = url.Substring(0, url.ToLower().IndexOf("/window"));
            }
            if (url.ToLower().Contains("/parm"))
            {
                url = url.Substring(0, url.ToLower().IndexOf("/parm"));
            }

            if (url.ToLower().Contains("="))
            {
                url = url.Substring(0, url.ToLower().IndexOf("="));
                url = url.Substring(0, url.ToLower().LastIndexOf("/") + 1);
            }


            if (url.EndsWith("/"))
            {
                url = url.Substring(0, url.ToLower().LastIndexOf("/"));
            }
            if (!BL.CheckAllowed(url, Session["login_name"].ToString()))
            {
                ViewBag.NotAllowed = true;
                string return_url = "/SiteAdmin/";
                if (Session["PevUrl"] != null)
                {
                    // return_url = Convert.ToString(Session["PevUrl"]);
                }
                ViewBag.Referer = return_url;
            }
            else
            {
                Session["PevUrl"] = url;
            }
        }