using System;
using System.Collections.Generic;
using System.Linq;
using System.Reflection;
using System.Threading.Tasks;
using System.Web;
using System.Web.Mvc;namespace UserManagmentSystem.Controllers
{public class ImplementedMethods{public List ActiveMethods;public  ImplementedMethods(){var asm = Assembly.GetExecutingAssembly();ActiveMethods  = asm.GetTypes().Where(type => typeof(Controller).IsAssignableFrom(type)).SelectMany(type => type.GetMethods()).Where(method => method.IsPublic&& !method.IsDefined(typeof(NonActionAttribute))&& (method.CustomAttributes.Any(s => s.AttributeType == typeof(HttpPostAttribute)) ||method.CustomAttributes.Any(s => s.AttributeType == typeof(HttpGetAttribute)))&& (!method.CustomAttributes.Any(s => s.AttributeType == typeof(AllowAnonymousAttribute)))&& method.CustomAttributes.Any(s => s.AttributeType == typeof(ClaimsAuthorizeAttribute))&& (method.ReturnType == typeof(ActionResult) ||method.ReturnType == typeof(Task) ||method.ReturnType == typeof(String)                       )).Select(m => m.CustomAttributes.FirstOrDefault(s => s.AttributeType == typeof(HttpPostAttribute) || s.AttributeType == typeof(HttpGetAttribute)).AttributeType.Name.Replace("Attribute", "") + " : " + m.DeclaringType.ToString().Split('.')[2].Replace("Controller", "") + "/" + m.Name).ToList();}}
}

先前功能的主要目标是检索所有控制器方法，这些方法是：

using System;
using System.Collections.Generic;
using System.Data;
using System.Data.Entity;
using System.Linq;
using System.Net;
using System.Web;
using System.Web.Mvc;
using AccountingSystem.Models;
using Audit.Mvc;namespace UserManagmentSystem.Controllers
{[Authorize]public class GroupsController : Controller{private AccountingdbEntities db = new AccountingdbEntities();// GET: Groupspublic ActionResult Index(){return View(db.tblGroups.ToList());}// GET: Groups/Details/5public ActionResult Details(int? id){if (id == null){return new HttpStatusCodeResult(HttpStatusCode.BadRequest);}tblGroups tblGroups = db.tblGroups.Find(id);if (tblGroups == null){return HttpNotFound();}GroupsViewModel groupsViewModel = new GroupsViewModel();ImplementedMethods implementedMethods = new ImplementedMethods();groupsViewModel.Name = tblGroups.Name;groupsViewModel.PK_Id = tblGroups.PK_Id;groupsViewModel.Actions = tblGroups.tblGroupActions.Select(s => new ActionsViewModel{PK_Id = s.PK_Id,Name = s.ActionName}).ToList();groupsViewModel.Users = tblGroups.tblUserGroups.Select(s => new UsersViewModel{Id = s.AspNetUsers.Id,Name = s.AspNetUsers.UserName,OrdersConut =  db.tblOrderStatusHistory.Where(k => k.FK_User == s.AspNetUsers.Id && k.tblOrderStatus.IsFirst && k.tblOrderStatus.IsDefault).Count()}).ToList();ViewBag.AvailableActions = implementedMethods.ActiveMethods.Where(t => !db.tblGroupActions.Any(k => k.FK_Group == id && k.ActionName == t)).Select(s => new SelectListItem { Value = s, Text = s }).ToList();return View(groupsViewModel);}[HttpPost][ValidateAntiForgeryToken]public ActionResult RevokeAction(int GroupId, string ActionName){tblGroupActions tblGroupActions = db.tblGroupActions.FirstOrDefault(s=> s.FK_Group == GroupId && s.ActionName == ActionName);if (tblGroupActions!= null){db.tblGroupActions.Remove(tblGroupActions);db.SaveChanges();}           return RedirectToAction("Details", new { id = GroupId });}[HttpPost][ValidateAntiForgeryToken]public ActionResult AddAction(int GroupId, string ActionName){tblGroupActions tblGroupActions = new tblGroupActions() { ActionName = ActionName, FK_Group = GroupId };if (tblGroupActions != null){db.tblGroupActions.Add(tblGroupActions);db.SaveChanges();}return RedirectToAction("Details", new { id = GroupId });}[HttpPost][ValidateAntiForgeryToken]public ActionResult RevokeUser(int GroupId, string UserId){tblUserGroups tblUserGroups = db.tblUserGroups.FirstOrDefault(s => s.FK_Group == GroupId && s.FK_User == UserId);if (tblUserGroups != null){db.tblUserGroups.Remove(tblUserGroups);db.SaveChanges();}return RedirectToAction("Details", new { id = GroupId });}protected override void Dispose(bool disposing){if (disposing){db.Dispose();}base.Dispose(disposing);}}
}

步骤4：授权验证“ClaimsAuthorizeAttribute”

using System;
using System.Collections.Generic;
using System.Data;
using System.Data.Entity;
using System.Linq;
using System.Net;
using System.Web;
using System.Web.Mvc;namespace UserManagmentSystem.Controllers
{[Authorize]public class CarriersController : Controller{[ClaimsAuthorize("HttpGet : Carriers/Index")][HttpGet]public ActionResult Index(){//}[ClaimsAuthorize("HttpGet : Carriers/Details")][HttpGet]public ActionResult Details(int? id){//}[ClaimsAuthorize("HttpGet : Carriers/Create")][HttpGet]public ActionResult Create(){//}[HttpPost][ValidateAntiForgeryToken][ClaimsAuthorize("HttpPost : Carriers/Create")]public ActionResult Create(Model){//}       }
}

第5步：声明分配

[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public async Task<ActionResult> Login(LoginViewModel model, string returnUrl)
{if (!ModelState.IsValid){return View(model);}var user = UserManager.Find(model.Email, model.Password);if (user != null){var UserClaim = user.Claims.AsEnumerable().ToList();foreach (IdentityUserClaim claim in UserClaim){await UserManager.RemoveClaimAsync(user.Id, new Claim(claim.ClaimType, claim.ClaimValue));}var UserClaims = db.tblGroupActions.AsEnumerable().Where(s => s.tblGroups.tblUserGroups.Any(l => l.FK_User == user.Id)).Select(k => new Claim(k.ActionName, k.ActionName)).ToList();foreach (Claim cliam in UserClaims){await UserManager.AddClaimAsync(user.Id, cliam);}}// This doesn't count login failures towards account lockout// To enable password failures to trigger account lockout,// change to shouldLockout: truevar result = await SignInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, shouldLockout: true);switch (result){case SignInStatus.Success:return RedirectToLocal(returnUrl);case SignInStatus.LockedOut:return View("Lockout");case SignInStatus.RequiresVerification:return RedirectToAction("SendCode",new { ReturnUrl = returnUrl, RememberMe = model.RememberMe });case SignInStatus.Failure:default:ModelState.AddModelError("", "Invalid login attempt.");return View(model);}
}

为特定组添加操作：