MVC权限模块

设计方向：

1.摒弃SiteMap，避免在容易书写错误的sitemap中书写，导航在controller和action上打标签生成。

2.controller统一继承basecontroller，在basecontroller上统一权限拦截。

3.使用缓存保存权限列表，避免反复读取数据库。 

4.使用Elinq作为ORM工具 

5.使用页面部分试图权限 

一. 获取权限视图缓存列表

        /// <summary>
        /// 获取权限视图缓存列表
        /// </summary>
        /// <returns></returns>
        public static List<AuthModel> GetAuthCache()
        {
            List<AuthModel> viewRoleGroup;
            string key = "ViewAuthList";
            if (HttpRuntime.Cache[key] != null)
            {
                viewRoleGroup = (List<AuthModel>)HttpRuntime.Cache[key];
            }
            else
            {
                viewRoleGroup = ElinqHelper.List<AuthModel>().Where(p => p.ID > 0).ToList();
            }
            return viewRoleGroup; }

 二.权限判断业务逻辑

   //权限判断业务逻辑
        protected virtual bool AuthorizeCore(ActionExecutingContext filterContext, bool isViewPage)
        {
            HttpCookie cookie = System.Web.HttpContext.Current.Request.Cookies.Get("userCookie");
            if (cookie != null)
            {
                HttpContext.Current.Session["name"] = cookie.Values["name"];
                HttpContext.Current.Session["zu"] = cookie.Values["zu"];
            }

            if (HttpContext.Current.Session["name"] == null) return false;
            if (HttpContext.Current.Session["name"].ToString() == "admin") return true;
            if (filterContext.HttpContext == null) throw new ArgumentNullException("httpContext");
            var controllerName = filterContext.RouteData.Values["controller"].ToString();
            var actionName = filterContext.RouteData.Values["action"].ToString();

            var list = GetCache.GetAuthCache();
            var grouplist = list.FirstOrDefault(p => p.CONTROLLERNAME == controllerName && p.ACTIONNAME == actionName).GROUPISLIST;
            var group = Convert.ToDecimal(HttpContext.Current.Session["zu"]);
            if (grouplist.Contains(group))return true;
            return false; }

        

三.权限拦截

    [newAuthorizeFilterAttribute]
    public class BaseController : Controller
    {
        protected override void OnException(ExceptionContext filterContext)
        {
            filterContext.Controller.ViewData["ErrorMessage"] = filterContext.Exception.Message;
            filterContext.Result = new ViewResult()
            {
                ViewName = "Error",
                ViewData = filterContext.Controller.ViewData,
            };
            filterContext.ExceptionHandled = true;
        } } 

四.更新权限列表

        [Description("更新权限列表")]
        public ActionResult UpAuthList()
        {
            var count = 0;
            var result = GetActionPermission.GetAllActionByAssembly().Where(p => !(p.ActionMethod is HttpPostAttribute));
            var dbConfiguration = ElinqHelper.dbConfiguration;
            ElinqHelper.AddClass<AuthModel>();
            using (var ctx = dbConfiguration.CreateDbContext())
            {
                var q = ctx.Set<AuthModel>();
                var sqlResult = q.Where(p => p.ID > 0);
                foreach (var item in result)
                {
                    var newId = ElinqHelper.NextVal("SQ_AUTH");
                    var auth = sqlResult.FirstOrDefault(p => p.CONTROLLERNAME == item.ControllerName
                        && p.ACTIONNAME == item.ActionName);
                    if (auth != null)
                    {
                        if (string.IsNullOrEmpty(auth.CONTROLLERNAME) || string.IsNullOrEmpty(auth.ACTIONNAME)) break;
                        if (auth.DESCRIPTION != item.Description)
                        {
                            if (q.Update(new { DESCRIPTION = item.Description, LASTTIME = DateTime.Now }, p => p.ID == auth.ID) > 0) count++;
                        }
                    }
                    else
                    {
                        AuthModel model = new AuthModel
                        {
                            ID = newId,
                            CONTROLLERNAME = item.ControllerName,
                            ACTIONNAME = item.ActionName,
                            DESCRIPTION = item.Description,
                            LASTTIME = DateTime.Now
                        };
                        if (q.Insert(model) > 0)
                        {
                            newId++;
                            count++;
                        }
                    }
                }
            }
            return Content("成功更新" + count.ToString() + "个");}

        

五.导航

public static MvcHtmlString GetWebPath(this HtmlHelper html, string itemTemplate)
        {
            var sb = new StringBuilder();
            var controllerList = GetCache.GetControllerCache();
            var menu = GetCache.GetActionCache()
              .Where(p => p.Attrs.Count(q => q.TypeId.ToString() == "MvcApplication.Controllers.Menu") > 0);

            CurrentUser currentuser = new CurrentUser();
            if (currentuser.ActionPermission == null)
                return MvcHtmlString.Create(sb.ToString());

            foreach (var controller in controllerList)
            {
                if (currentuser.ActionPermission != null)
                {
                    var list = currentuser.ActionPermission.Where(p => p.CONTROLLERNAME == controller.ControllerName && p.CONTROLLERNAME != "Home");
                    foreach (var item in list)
                    {
                        var result = menu.FirstOrDefault(p => p.ActionName == item.ACTIONNAME && p.ControllerName == item.CONTROLLERNAME);
                        if (result != null)
                        {
                            sb.Append(itemTemplate.Replace("{0}", result.ControllerName).Replace("{1}", result.ActionName).Replace("{2}",
                                controller.Description));
                            break;
                        }
                    }
                }
            }
            return MvcHtmlString.Create(sb.ToString());}

        

六.页面代码块级权限设计 

public static HelperResult RoleHtmlTags(this HtmlHelper htmlHelper, string action, Func<string, HelperResult> template)

        {

            var controller = HttpContext.Current.Request.RequestContext.RouteData.Values["controller"].ToString();

            CurrentUser currentuser = new CurrentUser();

            var auth = currentuser.ActionPermission.Count(p => p.CONTROLLERNAME == controller && p.ACTIONNAME == action);

            if (auth > 0)

            {

                return new HelperResult(writer =>

                {

                    writer.Write(template.Invoke(null));

                });

            }

            else

            {

                return null;

            }

        }

     页面使用方法 

@Html.RoleHtmlTags("WorkLogEdit", @<span>@Html.ActionLink("编辑", "WorkLogEdit", new { id = dt.id })<span>|</span></span>)