Web應用程序系統的多用戶權限控制設計及實現-項目架構【3】

本章主要講述Web權限管理系統的項目架構，及開發中需要的基本類和相關的CSS,JS文件。

1.1系統結構

本系統搭建開發工具為Visual Studio 2012,采用ASP.NET MVC 4.0技術開發。系統的框架圖如下所示：

特別說明：系統需要用到的CSS文件在Content目錄下，公有的JS文件在Scripts目錄下。其下載鏈接為：http://files.cnblogs.com/files/wlandwl/CSS-JS.zip

系統頁面前台展示主要運用EasyUI1.4.3的展示控件及其擴展控件，引用到Content目錄。系統后台管理主要通過區域的方式開發，運用區域管理可以模塊化的開發系統的功能，有助於中大型系統在后期的開發和維護。

1.2系統共有類

1.2.1數據表對應Model

AccountInfo.cs，主要管理賬戶的基本信息，及可以訪問的目錄信息，頁面信息。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;

namespace Models
{
    /// <summary>
    /// 用戶信息
    /// </summary>
    public class AccountInfo
    {
        public string OperatorId { get; set; }   //用戶ID
        public string OperatorName { get; set; }  //用戶名字
        public string AliasName { get; set; }  //別名
        public string Sex { get; set; }  //性別
        public int IsOnStaff { get; set; }
        public string OperatorGroupId { get; set; }   //用戶組ID
        public string OperatorGroupName { get; set; }   //用戶組名稱
        public IList<Catalog> NavigationList { get; set; }  //用戶能夠訪問的一級導航列表
        public IList<Catalog> RightList { get; set; }  //用戶權限列表    
    }
}

Catalog.cs，主要是用於目錄結構信息管理。

using System.Collections.Generic;

namespace Models
{
    /// <summary>
    /// 欄目
    /// </summary>
    public class Catalog
    {
        public int CatalogId { get; set; }
        public int ParentId { get; set; }
        public string CatalogName { get; set; }
        public string PictureUrl { get; set; }
        public string Remark { get; set; }
        public int ShowNo { get; set; }
        public int IsAvailable { get; set; }
        public IList<Catalog> Childern { get; set; }
        public IList<Page> PageList { get; set; }
        public Catalog()
        {
            Childern = new List<Catalog>();
            PageList = new List<Page>();
        }
    }
}

OperatorGroup.cs，主要是用於分組信息的管理。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;

namespace Models
{
    /// <summary>
    /// 用戶組
    /// </summary>
    public class OperatorGroup
    {
        public int GroupId { get; set; }
        public string GroupName { get; set; }
        public int OrderNum { get; set; }  //排序值
        public int ParentId { get; set; }  //父節點
        public int State { get; set; }  //是否啟用

    }
}

Page.cs，主要是用於頁面信息的管理。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;

namespace Models
{
    /// <summary>
    /// 頁面
    /// </summary>
    public class Page
    {
        public int CategoryId { get; set; }  //一級分類ID
        public string CategoryName { get; set; }  //一級分類名稱
        public decimal SubcategoryId { get; set; }  //二級分類ID
        public string SubcategoryName { get; set; }  //二級分類名稱
        public decimal PageIndex { get; set; }
        public string PageName { get; set; }
        public string PageUrl { get; set; }
        public string ProcedureName { get; set; }  //對應的存儲過程的名稱
        public string ReportRdlcName { get; set; }  //報表名稱（對應的rdlc的名稱）
        public string Title { get; set; }  //報表標題
        public string Subtitle { get; set; }  //副標題
        public string LeftHeader { get; set; }  //左側頁眉顯示信息
        public string MiddelHeader { get; set; }  //中間頁眉顯示信息
        public string RightHeader { get; set; }  //右側頁眉顯示信息
        public string LeftFooter { get; set; }  //左側頁腳顯示信息
        public string MiddleFooter { get; set; }  //中間頁腳顯示信息
        public string RightFooter { get; set; }  //右側頁腳顯示信息
        public int ShowNum { get; set; }   //顯示順序，排序值
        public int IsAvailable { get; set; }  //是否可用
        public string Operate { get; set; }
    }
}

TreeModel.cs,主要是為了生成一課權限管理樹，定義的節點類。

為了生成節點信息的安全和高效，引用了DotNetOpenAuth.Messaging動態鏈接庫，需要下載才可以加入到項目中。

using System;
using System.Collections.Generic;
using System.Data;
using System.Linq;
using DotNetOpenAuth.Messaging;

namespace Models
{
    /// <summary>
    /// 樹模型
    /// </summary>
    public class TreeModel
    {
        public decimal id { get; set; }
        public string text { get; set; }
        public string state { get; set; }
        public IList<TreeModel> children { get; set; }
        public object attributes { get; set; }
        /// <summary>
        /// 從數據行生成樹節點列表
        /// </summary>
        /// <param name="rows">行數組</param>
        /// <param name="idName">id對應的數據庫列</param>
        /// <param name="textName">text對應的數據庫列</param>
        /// <param name="parentIdName">父節點ID對應的數據庫列</param>
        /// <param name="needRoot">是否需要顯示根節點</param>
        /// <param name="attributes">自定義屬性</param>
        /// <returns></returns>
        public static IList<TreeModel> BuildTreeNodeList(DataRowCollection rows, string idName, string textName,
            string parentIdName, bool needRoot, params string[] attributes)
        {
            IList<TreeModel> tree = new List<TreeModel>();

            IList<TreeModel> resultList = new List<TreeModel>();

            if (rows.Count > 0)
            {
                foreach (DataRow dr in rows)
                {
                    var node = new TreeModel
                    {
                        id = DBNull.Value.Equals(dr[idName]) ? 0 : Convert.ToDecimal(dr[idName]),
                        text = DBNull.Value.Equals(dr[textName]) ? "" : Convert.ToString(dr[textName]),
                        state = "open",
                        children = new List<TreeModel>()
                    };

                    int isavailable = DBNull.Value.Equals(dr["isavailable"]) ? 0 : Convert.ToInt32(dr["isavailable"]);
                    int showno = DBNull.Value.Equals(dr["showno"]) ? 0 : Convert.ToInt32(dr["showno"]);
                    string remark = DBNull.Value.Equals(dr["remark"]) ? "" : Convert.ToString(dr["remark"]);
                    string picUrl = DBNull.Value.Equals(dr["picurl"]) ? "" : Convert.ToString(dr["picurl"]);

                    node.attributes = new CatalogAttributes
                    {
                        isavailable = isavailable,
                        remark = remark,
                        showno = showno,
                        picurl = picUrl
                    };

                    decimal parentId = DBNull.Value.Equals(dr[parentIdName]) ? 0 : Convert.ToDecimal(dr[parentIdName]);

                    bool hasFound = FoundTreeNode(resultList, node, parentId);
                    if (!hasFound)
                    {
                        resultList.Add(node);
                    }

                }
            }

            if (needRoot)
            {
                var rootNode = new TreeModel
                {
                    id = 0,
                    text = "欄目樹",
                    state = "open",
                    children = new List<TreeModel>()
                };
               rootNode.children.AddRange(resultList);
                tree.Add(rootNode);
                return tree;
            }

            return resultList;
        }

        public static IList<TreeModel> BuildTreeNodeListIncludeAll(DataRowCollection rows, string idName, string textName,
            string parentIdName)
        {

            IList<TreeModel> resultList = new List<TreeModel>();

            var root = new TreeModel
            {
                id = 0,
                text = "所有欄目",
                state = "open",
                children = new List<TreeModel>()
            };

            resultList.Add(root);

            if (rows.Count > 0)
            {
                foreach (DataRow dr in rows)
                {
                    var node = new TreeModel
                    {
                        id = DBNull.Value.Equals(dr[idName]) ? 0 : Convert.ToDecimal(dr[idName]),
                        text = DBNull.Value.Equals(dr[textName]) ? "" : Convert.ToString(dr[textName]),
                        state = "open",
                        children = new List<TreeModel>()
                    };

                    decimal parentId = DBNull.Value.Equals(dr[parentIdName]) ? 0 : Convert.ToDecimal(dr[parentIdName]);

                    bool hasFound = FoundTreeNode(resultList, node, parentId);
                    if (!hasFound)
                    {
                        resultList.Add(node);
                    }
                }
            }

            return resultList;
        }

        /// <summary>
        /// 在節點列表中查找父節點位置，並將新的節點插入
        /// </summary>
        /// <param name="nodeList">原始節點列表</param>
        /// <param name="newNode">新節點</param>
        /// <param name="parentId">父節點ID</param>
        /// <returns></returns>
        public static bool FoundTreeNode(IList<TreeModel> nodeList, TreeModel newNode, decimal parentId)
        {
            bool hasFound = false;
            var parent = nodeList.FirstOrDefault(n => n.id == parentId);
            if (parent != null)
            {
                parent.children.Add(newNode);
                hasFound = true;
            }
            else
            {
                //在孩子節點中查找
                foreach (TreeModel node in nodeList)
                {
                    IList<TreeModel> children = node.children;  //孩子節點
                    if (children != null && children.Count > 0)
                    {
                        hasFound = FoundTreeNode(children, newNode, parentId);
                        if (hasFound)
                            break;
                    }
                }
            }
            return hasFound;
        }
    }

    public class CustomAttributes
    {
        public string url { get; set; }
        public string pageName { get; set; }
    }

    public class CatalogAttributes
    {
        public string remark { get; set; }  //備注
        public int showno { get; set; }  //排序值
        public int isavailable { get; set; }  //狀態
        public string picurl { get; set; }  //圖標路徑
    }


}

1.2.1數據庫處理類

數據庫模板類主要是把常用sql語句的增，刪，改，查及事務集中起來。便於開發中通過類的實例化調用。

該類位於目錄OdbcDbAcess文件夾中。文件名稱：SqlHelper.cs。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Data;
using System.Configuration;
using System.Data.SqlClient;

namespace OdbcDbAccess
{
    public class SqlHelper
    {
        /// <summary>
        /// ****************************
        /// 功能：數據庫連接處理類
        /// 作者：王令
        /// 時間：2015-7-10
        /// 郵箱：[e-mail]
        /// ****************************

        private static SqlCommand CreateCommand(SqlConnection conn)
        {
            var comm = conn.CreateCommand();
            comm.CommandTimeout = 600;
            return comm;
        }

        /// <summary>
        /// 執行單一數據返回查詢
        /// </summary>
        /// <typeparam name="T">返回類型</typeparam>
        /// <param name="connName">配置文件中連接字符串的名稱</param>
        /// <param name="sql">查詢語句</param>
        /// <returns></returns>
        public static T ExecuteScalar<T>(string connName, string sql)
        {
            object result = null;
            SqlConnection conn = new SqlConnection(connName);
            {
                var comm = CreateCommand(conn);
                conn.Open();
                comm.CommandText = sql;
                result = comm.ExecuteScalar();
                conn.Close();
            }
            if (result != null && result != DBNull.Value)
                return (T)Convert.ChangeType(result, typeof(T));
            return default(T);
        }

        /// <summary>
        /// 查詢結果，返回多行數據【sql語句】
        /// </summary>
        /// <param name="sql">sql查詢語句</param>

        public static DataSet ExecuteQuery(string connectionString, string sql)
        {
            SqlConnection con = new SqlConnection(connectionString);
            string cmdText = sql;
            SqlDataAdapter da = new SqlDataAdapter(cmdText, con); ///創建SqlDataAdapter
            DataSet dss = new DataSet();
            try
            {
                con.Open();
                da.Fill(dss, "table1");
                con.Close();

            }
            catch (Exception ex)
            {   ///拋出異常
                throw new Exception(ex.Message, ex);
            }
            finally
            {   ///關閉連接
                con.Close();
            }
            return dss;
        }

        /// <summary>
        /// 執行事務操作
        /// </summary>
        /// <param name="sql">sql查詢語句</param>
        public static int ExecuteTran(string connectionString, string sql)
        {
            try
            {
                using (var conn = new SqlConnection(connectionString))
                {
                    var comm = conn.CreateCommand();
                    conn.Open();
                    var tran = conn.BeginTransaction();
                    comm.Transaction = tran;
                    try
                    {
                        comm.CommandText = sql;
                        comm.ExecuteNonQuery();
                        tran.Commit();
                        return 1;
                    }
                    catch (Exception)
                    {
                        tran.Rollback();
                        conn.Close();
                        return 0;
                        throw;
                      
                    }
                }
            }
            catch (Exception ex)
            {
                throw new Exception(ex.Message, ex);
            }
        }


        /// <summary>
        /// 數據集刪除，修改，添加【sql語句】
        /// </summary>
        /// <param name="sql">sql操作語句</param>

        public static int ExecuteNonQuery(string connectionString, string sql)
        {   ///創建連接
            SqlConnection con = new SqlConnection(connectionString);
            ///創建SQL語句
            string cmdText = sql;
            ///創建SqlCommand
            SqlCommand cmd = new SqlCommand(cmdText, con);

            int result = -1;
            try
            {   ///打開連接
                con.Open();
                ///操作數據
                result = cmd.ExecuteNonQuery();
            }
            catch (Exception ex)
            {   ///拋出異常
                throw new Exception(ex.Message, ex);
            }
            finally
            {   ///關閉連接
                con.Close();
            }

            return result;

        }

        /// <summary>
        /// 查詢結果，返回多行數據【存儲過程】 
        /// </summary>
        /// <param name="storage">存儲過程</param>

        public static DataSet ExecuteQueryWithParameter(string connectionString, string storage)
        {
            SqlConnection con = new SqlConnection(connectionString);
            string cmdText = storage;
            SqlDataAdapter da = new SqlDataAdapter(cmdText, con); ///創建SqlDataAdapter
            ///設置執行方式為存儲過程
            da.SelectCommand.CommandType = CommandType.StoredProcedure;


            DataSet dss = new DataSet();
            try
            {
                con.Open();
                da.Fill(dss, "table1");
                con.Close();

            }
            catch (Exception ex)
            {   ///拋出異常
                throw new Exception(ex.Message, ex);
            }
            finally
            {   ///關閉連接
                con.Close();
            }
            return dss;
        }
    }
}

 讀取webconfig中的數據庫連接字符串封裝在ConnectionHelper.cs中。

using System;
using System.Collections.Generic;
using System.Configuration;
using System.Data.Odbc;
using System.Linq;
using System.Text;

namespace OdbcDbAccess
{
    public class ConnectionHelper
    {
        public static string GeSqlDbConnectionStr()
        {
            return ConfigurationManager.ConnectionStrings["sqlSeverCenter"].ConnectionString;
        }

    }
}

1.2.2數據集轉換類

數據集轉換類，主要是為了把得到的數據如DataSet封裝成指定的格式數據，用於與前台網頁數據作特定的交互。

該類位於OdbcDbAcess文件夾中。文件名稱：DataTransfor.cs。

using System;
using System.Collections.Generic;
using System.Data;
using System.Text;


namespace OdbcDbAccess
{
    /// <summary>
    /// ****************************
    /// 功能：數據轉換類
    /// 作者：王令
    /// 時間：2015-7-10
    /// 郵箱：[e-mail]
    /// ****************************
    /// 
    public class DataTransfor
    {
        /// <summary>
        /// 數據轉換
        /// </summary>
        /// <typeparam name="T">數據類型</typeparam>
        /// <param name="dataSet">數據集，其字段順序必需與T的屬性順序一直</param>
        /// <returns></returns>
        public static IList<T> DataSetTransfor<T>(DataSet dataSet) where T : class,new()
        {
            IList<T> resultList = new List<T>();   //結果數據集合
            //獲取T的屬性集合
            Type tType = new T().GetType();
            var propertyArray = tType.GetProperties();

            if (dataSet != null && dataSet.Tables.Count > 0)
            {
                DataTable table = dataSet.Tables[0];
                foreach (DataRow dr in table.Rows)
                {
                    T item = new T();
                    //為屬性設值
                    for (int i = 0; i < propertyArray.Length; i++)
                    {
                        if (!DBNull.Value.Equals(dr[i]))
                        {
                            var propertyInfo = propertyArray[i];   //獲取屬性
                            Type propertyType = propertyInfo.PropertyType;
                            object value = Convert.ChangeType(dr[i], propertyType);  //將DataSet中的值轉換為屬性同類型的值
                            propertyInfo.SetValue(item, value, null);  //為屬性設置值
                        }
                    }
                    resultList.Add(item);
                }
            }
            return resultList;
        }


        /// <summary>
        /// 數據轉換--指定部分屬性
        /// </summary>
        /// <typeparam name="T">數據類型</typeparam>
        /// <param name="dataSet">數據集，其字段順序必需與T的屬性propertyArray順序一直</param>
        /// <param name="propertyArray">指定類的屬性數組</param>
        /// <returns></returns>
        public static IList<T> DataSetTransfor<T>(DataSet dataSet, string[] propertyArray) where T : class,new()
        {
            IList<T> resultList = new List<T>();   //結果數據集合

            //獲取T的數據類型
            Type tType = new T().GetType();

            if (dataSet != null && dataSet.Tables.Count > 0)
            {
                DataTable table = dataSet.Tables[0];
                foreach (DataRow dr in table.Rows)
                {
                    var item = new T();
                    //為屬性設值
                    for (int i = 0; i < propertyArray.Length; i++)
                    {
                        var propertyInfo = tType.GetProperty(propertyArray[i]);   //獲取屬性

                        if (!DBNull.Value.Equals(dr[i]))
                        {
                            string propertyTypeName = propertyInfo.PropertyType.FullName.Trim();
                            object value;
                            switch (propertyTypeName)
                            {
                                case "System.DateTime":
                                    value = Convert.ToDateTime(dr[i]);
                                    break;
                                case "System.Decimal":
                                    value = Convert.ToDecimal(dr[i]);
                                    break;
                                case "System.Double":
                                    value = Convert.ToDouble(dr[i]);
                                    break;
                                case "System.Int32":
                                    value = Convert.ToInt32(dr[i]);
                                    break;
                                default:
                                    value = Convert.ToString(dr[i]);
                                    break;
                            }
                            propertyInfo.SetValue(item, value, null);  //為屬性設置值
                        }

                    }
                    resultList.Add(item);
                }
            }
            return resultList;
        }


        /// <summary>
        /// 數據轉換--指定部分屬性
        /// </summary>
        /// <typeparam name="T">數據類型</typeparam>
        /// <param name="dataSet">數據集，其字段順序必需與T的屬性propertyArray順序一直</param>
        /// <param name="columnIndexArray">DataSet中的字段對應的下表數組,其長度和PropertyArray相同</param>
        /// <param name="propertyArray">指定類的屬性數組</param>
        /// <returns></returns>
        public static IList<T> DataSetTransfor<T>(DataSet dataSet, int[] columnIndexArray, string[] propertyArray) where T : class,new()
        {
            IList<T> resultList = new List<T>();   //結果數據集合

            //獲取T的數據類型
            Type tType = new T().GetType();

            if (dataSet != null && dataSet.Tables.Count > 0)
            {
                if (columnIndexArray != null && propertyArray != null && columnIndexArray.Length == propertyArray.Length)
                {
                    DataTable table = dataSet.Tables[0];
                    foreach (DataRow dr in table.Rows)
                    {
                        var item = new T();
                        for (int i = 0; i < columnIndexArray.Length; i++)
                        {
                            int index = columnIndexArray[i];
                            if (!DBNull.Value.Equals(dr[index]))
                            {
                                //為屬性設值
                                var propertyInfo = tType.GetProperty(propertyArray[i]);   //獲取屬性
                                object value = Convert.ChangeType(dr[index], propertyInfo.PropertyType);  //將DataSet中的值轉換為屬性同類型的值
                                propertyInfo.SetValue(item, value, null);  //為屬性設置值
                            }
                        }
                        resultList.Add(item);
                    }
                }
            }
            return resultList;
        }


        /// <summary>
        /// 將List中的數據，封裝為Combobox的Html
        /// </summary>
        /// <typeparam name="T">數據類型</typeparam>
        /// <param name="dataList">數據列表</param>
        /// <param name="valueProperty">value綁定的屬性名稱,多個用“,”分隔</param>
        /// <param name="textProperty">text綁定的屬性名稱</param>
        /// <param name="containAll">是否包含"全部"選項</param>
        /// <returns></returns>
        public static string ListToComboboxHtml<T>(IList<T> dataList, string valueProperty, string textProperty, bool containAll) where T : class, new()
        {
            var htmlStr = new StringBuilder();

            if (dataList != null && dataList.Count > 0)
            {
                if (containAll && dataList.Count > 1)
                {
                    htmlStr.Append("<option value=\"-1\">全部</option>");
                }

                string[] valuePropertyArray = valueProperty.Split(',');

                //獲取T的數據類型
                Type tType = new T().GetType();
                foreach (T item in dataList)
                {
                    var textPropertyInfo = tType.GetProperty(textProperty);   //獲取Text屬性

                    htmlStr.Append("<option value=\"");
                    for (int i = 0; i < valuePropertyArray.Length; i++)
                    {
                        string s = valuePropertyArray[i];
                        var valuePropertyInfo = tType.GetProperty(s);   //獲取Value屬性
                        htmlStr.Append(valuePropertyInfo.GetValue(item, null));
                        if (i != valuePropertyArray.Length - 1)
                        {
                            htmlStr.Append("_");
                        }
                    }

                    htmlStr.Append("\">");
                    htmlStr.Append(textPropertyInfo.GetValue(item, null));
                    htmlStr.Append("</option>");
                }
            }
            return htmlStr.ToString();
        }
        /// <summary>
        /// 將List中的數據，封裝為datagrid body的Html
        /// </summary>
        /// <typeparam name="T">數據類型</typeparam>
        /// <param name="dataList">數據列表</param>
        /// <param name="propertyArray">屬性數組,其順序和前台顯示順序一致</param>
        /// <returns></returns>
        public static string ListToTableHtml<T>(IList<T> dataList, string[] propertyArray)
            where T : class, new()
        {
            var htmlStr = new StringBuilder();

            if (dataList != null && dataList.Count > 0)
            {
                //獲取T的數據類型
                Type tType = new T().GetType();
                foreach (T item in dataList)
                {
                    htmlStr.Append("<tr>");
                    for (int i = 0; i < propertyArray.Length; i++)
                    {
                        htmlStr.Append("<td>");
                        htmlStr.Append(tType.GetProperty(propertyArray[i]).GetValue(item, null));
                        htmlStr.Append("</td>");
                    }
                    htmlStr.Append("</tr>");
                }
            }
            return htmlStr.ToString();
        }
        /// <summary>
        /// 數據轉換-2015-4-17添加
        /// </summary>
        /// <typeparam name="T">數據類型</typeparam>
        /// <param name="dataSet">數據集，所有數據轉換為string</param>    
        public static IList<T> DataSetTransforString<T>(DataSet dataSet) where T : class,new()
        {
            IList<T> resultList = new List<T>();   //結果數據集合

            //獲取T的屬性集合
            Type tType = new T().GetType();
            var propertyArray = tType.GetProperties();

            if (dataSet != null && dataSet.Tables.Count > 0)
            {
                DataTable table = dataSet.Tables[0];
                var temp = dataSet.Tables[0].Columns.Count;
                foreach (DataRow dr in table.Rows)
                {
                    T item = new T();
                    //為屬性設值
                    for (int i = 0; i < temp; i++)
                    {
                        var propertyInfo = propertyArray[i];   //獲取屬性
                        Type propertyType = propertyInfo.PropertyType;
                        object value = DBNull.Value.Equals(dr[i]) ? "" : dr[i].ToString();  //將DataSet中的值轉換為屬性同類型的值
                        propertyInfo.SetValue(item, value, null);  //為屬性設置值
                    }
                    resultList.Add(item);
                }
            }
            return resultList;
        }



     

    }
}

 

1.2.3會話管理類

會話管理類是權限管理系統的核心類，它主要是根據登錄者的id和密碼獲取相應信息，同時把登錄者可以點擊的目錄，訪問的網頁存在session中。供系統自動配置出用戶的可訪問信息。

該類位於BaseBag文件夾中。文件名稱：SessionManage.cs。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using Models;
using OdbcDbAccess;
using System.Data;
using LogInfo;

namespace Session
{
    /// <summary>
    /// ****************************
    /// 功能：會話管理類
    /// 作者：王令
    /// 時間：2015-7-18
    /// 郵箱：[e-mail]
    /// ****************************
    
    public class SessionManage
    {

        /// <summary>
        /// Web虛擬目錄路徑
        /// </summary>
        public static string AppPath
        {
            get
            {
                return HttpContext.Current.Request.ApplicationPath;
            }
        }


        /// <summary>
        /// 當前訪問的Web域名
        /// </summary>
        public static string WebRoot
        {
            get
            {
                string url = HttpContext.Current.Request.Url.AbsoluteUri;
                url = url.Remove(0, 7);
                url = "http://" + url.Substring(0, url.IndexOf('/')) + AppPath;
                return url.ToLower();
            }
        }


        /// <summary>
        /// 用戶認證信息KEY
        /// </summary>
        private const string UserInfoKey = "USER_INFO_KEY";


        /// <summary>
        /// 當前登陸用戶信息
        /// </summary>
        public static AccountInfo CurrentUser
        {
            get
            {
                if (HttpContext.Current.Session[UserInfoKey] == null)
                    return null;

                return (AccountInfo)HttpContext.Current.Session[UserInfoKey];
            }
            set { HttpContext.Current.Session[UserInfoKey] = value; }
        }


        /// <summary>
        /// 用戶權限驗證
        /// </summary>
        /// <returns></returns>
        public static bool CheckRight()
        {
            try
            {
                if (CurrentUser == null)
                {
                    //當前用戶信息是否為空，為空,驗證失敗
                    return false;
                }
                else
                {
                    string fUrl = HttpContext.Current.Request.Url.AbsoluteUri.Trim();  //用戶當前請求的地址
                    if (fUrl.EndsWith("/"))
                    {
                        fUrl = fUrl.Substring(0, fUrl.Length - 1);
                    }
                    else
                    {
                        if (fUrl.Contains("?"))
                        {
                            fUrl = fUrl.Substring(0, fUrl.LastIndexOf("?", System.StringComparison.Ordinal));
                        }
                    }
                    fUrl = fUrl.Substring(0, fUrl.LastIndexOf("/", System.StringComparison.Ordinal) + 1);//只取到控制器名稱，具體的ActionName不在考慮，因為不同的Action都會形成不同的URL
                    fUrl = fUrl.Trim('/');
                    string[] url = fUrl.Split('/');
                    string righturl = "";
                    for (int i = 3; i < url.Length; i++)
                    {
                        righturl += url[i] + "/";
                    }
                    string strSql = "select PageUrl from pageinfo,rightlist where pageinfo.PageUrl like '" + righturl + "%' and pageinfo.pageid=rightlist.pageid and operatorgroupid='" + CurrentUser.OperatorGroupId + "'  ";

                    DataSet dataSet = SqlHelper.ExecuteQuery(ConnectionHelper.GeSqlDbConnectionStr(), strSql);
                    if (dataSet != null && dataSet.Tables.Count > 0 && dataSet.Tables[0].Rows.Count > 0)
                    {
                        return true;
                    }
                    else
                    {
                        return false;
                    }
                }
            }
            catch (Exception ex)
            {
                Log.SaveErrorLog(ex.ToString(), "用戶權限判斷出錯!");
                return false;
            }
        }


    }

}

 

1.2.4頁面權限檢測控制器

頁面權限檢測控制器主要是每訪問一個頁面信息時，校驗該用戶是否具有訪問該頁面的權限。定義為BaseControl.cs控制器，其他的控制器均繼承該控制器。

using System;
using Session;
using OdbcDbAccess;
using System.Data;
using Models;
using System.Web;
using System.Web.Mvc;
using System.Collections.Generic;
using System.Configuration;
using System.IO;
using System.Web.Caching;

namespace Controllers
{
    /// <summary>
    /// ****************************
    /// 功能：頁面權限檢測
    /// 作者：王令
    /// 時間：2015-7-15
    /// 郵箱：[e-mail]
    /// ****************************
 
    public class BaseController : Controller
    {     
        /// <summary>
        /// sql sever連接字符串
        /// </summary>
        protected static string SqlSeverConnectionName = ConfigurationManager.ConnectionStrings["sqlSeverCenter"].ConnectionString;
        
        /// <summary>
        /// 控制器初始化，判斷用戶權限以及登陸是否過期
        /// </summary>
        /// <param name="requestContext"></param>
        protected override void Initialize(System.Web.Routing.RequestContext requestContext)
        {
            base.Initialize(requestContext);       
            if (!SessionManage.CheckRight())
            {
                Response.Write("<script> window.parent.location.href = '/Login/Login';</script>");
            }
        }

    }
}

1.3系統模板頁

由於登錄到首頁后，其他頁面均是在生成的iframe標簽中展示，這些頁面都需要引用一些相同的CSS文件，JS文件，為了網頁的統一管理，開發了一個共享頁面，作為其他頁面的模板頁。

模板頁位於Views/Shared目錄中，文件名稱為：_BaseLayout.cshtml。引用它的頁面通過 @RenderBody()的方式即可把html代碼渲染在網頁中。

<!DOCTYPE html>
<html>
<head>
    <meta name="viewport" content="width=device-width" />
    <link type="text/css" rel="stylesheet" href="~/Content/easyui143/themes/gray/easyui.css" />
    <link type="text/css" rel="stylesheet" href="~/Content/easyui143/themes/icon.css" />
    <link type="text/css" rel="stylesheet" href="~/Content/easyui143/themes/color.css" />
    <style type="text/css">
        .panel-title {
            text-align: center;
        }

        .datagrid-header-inner {
            width: 100%;
        }

        .datagrid-htable, .datagrid-btable, .datagrid-ftable {
            width: 100%;
        }
    </style>

       <style type="text/css">
        .panel-title {
            text-align: center;
        }

        .panel-title {
            line-height: 22px;
            letter-spacing: 1px;
        }
    

        .datagrid-header-inner {
            width: 100%;
        }

        .datagrid-htable, .datagrid-btable, .datagrid-ftable {
            width: 100%;
        }

        span.datagrid-row-expander.datagrid-row-expand {
            display: block !important;
        }

        span.datagrid-row-expander.datagrid-row-collapse {
            display: block !important;
        }

        div[id^='ddv-']  table {
            font-size: smaller;
            border-right: 1px groove rgba(248, 243, 243, 0.27);
            border-bottom: 1px groove rgba(248, 243, 243, 0.27);
            width: 1000px;
            margin-bottom: 20px;
        }

            div[id^='ddv-'] table td, div[id^='ddv-']  table th {
                line-height: 20px;
                border-left: 1px groove rgba(248, 243, 243, 0.27);
                border-top: 1px groove rgba(248, 243, 243, 0.27);
                border-bottom: none;
                border-right: none;
               
                padding-left: 10px;
                color: #808080;
                font-weight: 100;
            }

        div[id^='ddv-'] .easyui-tabs .tabtitle {
            color: lightblue;
        }
    </style>
    @RenderSection("style", required: false)
    <title>@ViewBag.Title</title>
</head>

<body>
    <div style="margin: 10px 0 10px 10px; font-weight: bold; font-size: 14px; font-family: 宋體,Arial,Helvetica,sans-serif" id="titleDiv">
        <input type="hidden" value="true" id="firstLoadFlag" />
    </div>

    @RenderBody()

    <script src="@Url.Content("~/Scripts/jquery-1.7.1.js")"></script>
    <script src="@Url.Content("~/Scripts/jquery.unobtrusive-ajax.js")"></script>
    <script src="@Url.Content("~/Scripts/jquery.validate.js")"></script>
    <script src="@Url.Content("~/Scripts/jquery.validate.unobtrusive.js")"></script>
    <script type="text/javascript" src="@Url.Content("~/Content/easyui143/jquery.easyui.min.js")"></script>
    <script type="text/javascript" src="@Url.Content("~/Content/easyui143/locale/easyui-lang-zh_CN.js")"></script>
    <script src="@Url.Content("~/Scripts/CustomJs/common.js")"></script>
    <script src="@Url.Content("~/Content/easyui143/datagrid-detailview.js")" type="text/javascript"></script>
    @RenderSection("scripts", required: false)

</body>

</html>

 總結：本章主要介紹了項目的基本架構，常用的基本信息類。通過前前三章的介紹，已經完成了項目開發的前期准備工作，第四章開始，就以模塊化的方式講述每個模塊的開發流程。