/// <summary>/// 获取sharepoint站点角色定义 rest api/// </summary>/// <param name="hostWebUrl"></param>/// <param name="strAPI"></param>/// <param name="userName"></param>/// <param name="pwd"></param>/// <param name="domain"></param>/// <returns></returns>private static ArrayList GetRoleDefinition(string hostWebUrl, string strAPI, string userName, string pwd, string domain){HttpWebRequest request = null;HttpWebResponse response = null;StreamReader sr = null;strAPI = hostWebUrl + strAPI;ArrayList lstRoleDefinition = new ArrayList();try{request = (HttpWebRequest)HttpWebRequest.Create(strAPI);request.Credentials = new NetworkCredential(userName, pwd, domain);request.Method = "GET";request.Accept = "application/json;odata=verbose";using (response = (HttpWebResponse)request.GetResponse()){using (sr = new StreamReader(response.GetResponseStream(), Encoding.UTF8)){JObject jobj = JObject.Parse(sr.ReadToEnd());var results = jobj["d"]["results"];foreach (var item in results){lstRoleDefinition.Add(new{Id = Convert.ToInt32(item["Id"]),Description = item["Description"] != null ? item["Description"].ToString() : "",Hidden = Convert.ToBoolean(item["Hidden"]),Name = item["Name"] != null ? item["Name"].ToString() : "",Order = Convert.ToInt32(item["Order"]),RoleTypeKind = Convert.ToInt32(item["RoleTypeKind"]),BasePermissions = new{High = item["BasePermissions"]["High"] != null ? item["BasePermissions"]["High"].ToString() : "",Low = item["BasePermissions"]["Low"] != null ? item["BasePermissions"]["Low"].ToString() : ""}});}}}}catch (WebException ex){throw ex;}return lstRoleDefinition;}/// <summary>/// 将用户添加到sharepoint站点。/// </summary>/// <param name="hostWebUrl"></param>/// <param name="addUserName"></param>/// <param name="userName"></param>/// <param name="pwd"></param>/// <param name="domain"></param>/// <returns></returns>private static object AddUserToSharePointSite(string hostWebUrl, string addUserName, string userName, string pwd, string domain){if (hostWebUrl.Contains("https")){//如果请求的站点是https的url，则使证书的认证返回true。ServicePointManager.ServerCertificateValidationCallback = new System.Net.Security.RemoteCertificateValidationCallback((sender, certificate, chain, sslPolicyErrors) =>{return true;});}try{ClientContext spContext = new ClientContext(hostWebUrl);spContext.Credentials = new NetworkCredential(userName, pwd, domain);Web web = spContext.Web;string loginName = @"i:0#.w|" + domain + "" + addUserName;User user = web.EnsureUser(loginName);//需要load，不然拿不到user的属性
                spContext.Load(user);spContext.ExecuteQuery();return new { Email = user.Email, Id = user.Id, LoginName = user.LoginName, Title = user.Title };}catch (WebException ex){throw ex;}}public static string GetContextinfo(string hostWebUrl, string userName, string pwd, string domain){HttpWebRequest contextInfoRequest = null;HttpWebResponse endpointResponse = null;StreamReader sr = null;string strJson = string.Empty;try{//获取contextinfocontextInfoRequest = (HttpWebRequest)HttpWebRequest.Create(hostWebUrl + "/_api/contextinfo");contextInfoRequest.Method = "POST";contextInfoRequest.Credentials = new NetworkCredential(userName, pwd, domain);contextInfoRequest.Accept = "application/json;odata=verbose";contextInfoRequest.ContentLength = 0;using (endpointResponse = (HttpWebResponse)contextInfoRequest.GetResponse()){using (sr = new StreamReader(endpointResponse.GetResponseStream(), Encoding.UTF8)){strJson = sr.ReadToEnd();JObject jobj = JObject.Parse(strJson);return jobj["d"]["GetContextWebInformation"]["FormDigestValue"].ToString();}}}catch (Exception ex){throw ex;}}/// <summary>/// 将用户添加到sharepoint站点。rest api方式/// </summary>/// <param name="hostWebUrl"></param>/// <param name="addUserName"></param>/// <param name="userName"></param>/// <param name="pwd"></param>/// <param name="domain"></param>/// <returns></returns>private static string AddUserToSharePointSite(string hostWebUrl, bool isRestAPI, string addUserName, string userName, string pwd, string domain){string data = "{ '__metadata': { 'type': 'SP.User' }, 'LoginName':'i:0#.w|membership|" + addUserName + "'}";string strAPI = "_api/Web/siteusers";HttpWebRequest request = null;StreamReader sr = null;HttpWebResponse response = null;try{request = (HttpWebRequest)HttpWebRequest.Create(hostWebUrl + "/" + strAPI);request.Method = "POST";if (!string.IsNullOrEmpty(data)){byte[] buffer = Encoding.UTF8.GetBytes(data);request.ContentLength = buffer.Length;using (Stream requestStream = request.GetRequestStream()){requestStream.Write(buffer, 0, buffer.Length);}}else{request.ContentLength = 0;}request.Credentials = new NetworkCredential(userName, pwd, domain);request.Accept = "application/json;odata=verbose";request.ContentType = "application/json;odata=verbose";request.Headers.Add("X-RequestDigest", GetContextinfo(hostWebUrl, userName, pwd, domain));using (response = (HttpWebResponse)request.GetResponse()){using (sr = new StreamReader(response.GetResponseStream(), Encoding.UTF8)){return sr.ReadToEnd();}}}catch (Exception ex){throw ex;}}/// <summary>/// 为文件夹授权/// </summary>/// <param name="currentCoworkLibrary"></param>/// <param name="strCheckUser"></param>private static void AssignToUserReadPermissionToFolder(string hostWebUrl, string folderServerRelativeUrl, string strCheckUser, string userName, string pwd, string domain){//https,取消https证书认证if (hostWebUrl.Contains("https")){ServicePointManager.ServerCertificateValidationCallback = new System.Net.Security.RemoteCertificateValidationCallback((sender, certificate, chain, sslPolicyErrors) =>{return true;});}try{ServicePointManager.Expect100Continue = false;ClientContext spContext = new ClientContext(hostWebUrl);spContext.Credentials = new NetworkCredential(userName, pwd, domain);Web web = spContext.Web;string loginName = @"i:0#.w|" + domain + "\\" + strCheckUser;Principal user = web.EnsureUser(loginName);spContext.ExecuteQuery();Folder folder = web.GetFolderByServerRelativeUrl(folderServerRelativeUrl);var roleDefinition = spContext.Site.RootWeb.RoleDefinitions.GetByType(RoleType.Reader);var roleBindings = new RoleDefinitionBindingCollection(spContext) { roleDefinition };spContext.ExecuteQuery();if (folder != null){folder.ListItemAllFields.BreakRoleInheritance(true, false);folder.ListItemAllFields.RoleAssignments.Add(user, roleBindings);}}catch (Exception ex){throw ex;}}

_api/web/lists/getByTitle('" + LibraryName + "')/RoleAssignments/addroleassignment(principalid=" + userId + ",roledefid=" + roleDefinitionId + ")"