public IActionResult GetUserRoleMebmer(int userid)
{
Tright_User_Role_Da userroleManage = new Tright_User_Role_Da();
var list = userroleManage.Select.Where(s => s.Userid == userid).ToList();
return(SuccessResultList(list));
}
/// <summary>
/// 给用户设置默认登录角色
/// </summary>
/// <returns></returns>
public void SetDefaultRole(int userid)
{
Tright_User_Role_Da userrole = new Tright_User_Role_Da();
if (userrole.Where(s => s.Userid == userid).Count() <= 0)
{
Tright_User_Role userolemodel = new Tright_User_Role()
{
Roleid = 1, //默认1为普通会员
Userid = userid
};
userrole.Insert(userolemodel);
}
}
public IActionResult DeleteUserRoleMebmer(int id)
{
Tright_User_Role_Da userroleManage = new Tright_User_Role_Da();
var model = userroleManage.Select.Where(s => s.Id == id);
if (model == null)
{
return(SuccessMessage("请不要反复取消！"));;
}
if (userroleManage.Delete(s => s.Id == id) > 0)
{
return(SuccessMessage("成功！"));
}
return(FailMessage());
}
public IActionResult AddUserRoleMebmer(int userid, int roleid)
{
Tright_User_Role_Da userroleManage = new Tright_User_Role_Da();
if (userroleManage.Select.Where(s => s.Role_Id == roleid && s.User_Id == userid).Count() > 0)
{
return(SuccessMessage("请不要反复添加！"));
}
Tright_User_Role model = new Tright_User_Role
{
Role_Id = roleid,
User_Id = userid
};
userroleManage.Insert(model);
return(SuccessMessage("添加成功！"));
}
public override void OnActionExecuting(ActionExecutingContext Context)
{
base.OnActionExecuting(Context);
//先取出登录用户id
int userid = int.Parse(Context.HttpContext.User.FindFirst("userId").Value);
//根据配置文件决定是否给初次登录的用户 分配一个默认的登录角色
if (AppConfig.IsSetDefautlRole)
{
SetDefaultRole(userid);
}
//如果Ignore 为true 则表示不检查该操作，这里只给他初次登录分配 普通会员角色
if (Ignore)
{
return;
}
//获取路由地址
string areaName = string.Empty;
string controllerName = string.Empty;
string actionName = string.Empty;
string page = GetPageUrl(Context, ref areaName, ref controllerName, ref actionName);
//判断请求的 为访问页面 还是 请求功能操作 Ajax请求为功能， 非ajax请求为访问页面
var isAjax = Context.HttpContext.Request.Headers["X-Requested-With"] == "XMLHttpRequest";
//判断数据库是否存在该权限，不存则自动添加，无需手动配置
AddActionFunc(controllerName, actionName, areaName, page, isAjax);
//如果全局配置忽略权限，则忽略检测
if (AppConfig.IgnoreAuthRight)
{
return;
}
//若该用户存在该页面权限，则直接return
Tright_User_Role_Da userrole = new Tright_User_Role_Da();
if (userrole.ListByVm(userid, page).Count() > 0)
{
return;
}
//是否ajax请求，是ajax 则判定为 请求操作， 非ajax则判定为 访问页面
if (isAjax)
{
Context.Result = new JsonResult(new { Success = false, Code = 405, Message = "您没有该功能操作权限！" });
return;
}
//跳转指定的没有权限的页面
Context.Result = new RedirectToRouteResult(new RouteValueDictionary(new
{
controller = "UserRight",
action = "NoPermission"
}));
return;
}
