1 using System;
 2 using System.Collections.Generic;
 3 using System.Linq;
 4 using System.Text;
 5 using System.Web;
 6 using System.Web.Mvc;
 7 using System.Web.Profile;
 8 using System.Web.Routing;
 9 using System.Web.Security;
10 namespace XyguiMvcApp.Filters
11 {
12     //限制Attribute类的使用
13     [AttributeUsage(AttributeTargets.All, AllowMultiple = true, Inherited = true)]
14     public class AdminAuthorizeAttribute : ActionFilterAttribute
15     {
16         /// <summary>
17         ///  角色
18         /// </summary>
19         private string role = "";
20         /// <summary>
21         /// 摘要:获取或设置用户角色。
22         // 返回结果:用户角色。
23         /// </summary>
24         public string Role
25         {
26             get { return role; }
27             set { role = value; }
28         }
29
30         public override void OnActionExecuting(ActionExecutedContext filterContext)
31         {
32             switch (role)
33             {
34                 case "Admin":   //Admin角色权限检查。
35                     var cookie = System.Web.HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName];
36                     if (cookie != null && FormsAuthentication.Decrypt(cookie.Value).UserData == role)
37                     {
38                         //验证通过
39                     }
40                     else
41                     {
42                         string returnUrl = HttpContext.Current.Request.Url.PathAndQuery;
43                         var url = FormsAuthentication.LoginUrl + "?returnUrl=" + HttpUtility.UrlEncode(returnUrl);
44                         //HttpContext.Current.Response.Redirect(url, true);//进入action
45                         //filterContext.HttpContext.Response.Redirect(url);//进入action
46                         /*filterContext.Result = new RedirectToRouteResult( //不进入action
47                         new RouteValueDictionary
48                         {
49                             { "action", "Login" },
50                             { "controller", "Admin" },
51                             {"returnUrl", returnUrl}
52                         });*/
53                         filterContext.Result = new RedirectResult(url);//不进入action，转到登录页面。
54                     }
55
56                     break;
57                 case "Anyone":  //任何人。
58
59                     break;
60                 case "Guest":  //Guest权限
61
62                     break;
63                 default:
64
65                     break;
66
67             }
68
69         }
70     }
71 }