分享：简单的权限管理系统

        public override void OnActionExecuting(ActionExecutingContext context)
        {
            base.OnActionExecuting(context);

            //获取缓存数据
            var allPermission = CacheHelper.GetCache<List<Permission>>(CacheKeys.AllPermission);

            //1、如果当前有匿名标记，则不需要登陆直接可以访问
            //2、判断登陆，如果没有登陆则跳转到登陆页面
            //3、如果当前有默认标记，则直接访问
            //4、判断当前用户是否有权限访问当前方法

            //获取请求的路由对应权限
            var area = context.RouteData.Values["area"]?.ToString();
            var controller = context.RouteData.Values["controller"]?.ToString();
            var actoin = context.RouteData.Values["action"]?.ToString();
            var requestRoute = $"/{area}/{controller}/{actoin}".Replace("//", "/");
            var requestPermission = allPermission.FirstOrDefault(t => t.Route == requestRoute);

            //获取自定义特性的父权限路由对应的访问权限
            var filters = context.Filters.Where(t => (t as ParentPermissionAttribute) != null);
            var filterRoutes = filters.Select(t =>
            {
                var attribute = t as ParentPermissionAttribute;
                return $"/{attribute.Area}/{attribute.Controller}/{attribute.Action}".Replace("//", "/");
            }).ToList();

            var actionPermissions = allPermission.Where(t => filterRoutes.Any(m => m == t.Route)).ToList();

            if (requestPermission != null)
            {
                actionPermissions.Add(requestPermission);
            }

            if (actionPermissions.Count == 0)
            {
                context.Result = Content("该权限未开放");
                return;
            }


            //包含匿名访问权限，直接访问
            if (actionPermissions.Any(t => t.Access == PermissionAccess.Anonymous))
            {
                return;
            }

            //判断是否登陆，后面的验证都是登陆为基础
            if (CurrentUser == null)
            {
                context.Result = new RedirectResult($"/SystemManage/Account/Login?returnUrl={HttpUtility.UrlEncode(Request.Path)}");
                return;
            }

            //如果该功能显示为页面，处理页面按钮显示
            if (requestPermission != null && requestPermission.Display == PermissionDisplay.Menu)
            {
                //查看该页面下所有的按钮权限
                var buttons = allPermission.Where(t => t.Display == PermissionDisplay.Button && t.MenuId == requestPermission.MenuId).ToList();
                var dict = new Dictionary<string, bool>
                {
                    //添加默认，防止为空时页面出错
                    { "", true }
                };

                buttons.ForEach(t =>
                {
                    //生成按钮在当前用户下的权限列表
                    dict.Add(t.Code, CurrentPermissions.Any(m => m.Id == t.Id));
                });
                ViewBag.PCodes = JsonConvert.SerializeObject(dict);
            }

            //默认权限，登陆后访问
            if (actionPermissions.Any(t => t.Access == PermissionAccess.Default))
            {
                return;
            }

            //最后验证特定权限
            //用户所有权限是否包含当前权限
            var hasPermission = false;
            foreach (var item in CurrentPermissions)
            {
                if (actionPermissions.Any(t => t.Id == item.Id))
                {
                    hasPermission = true;
                    break;
                }
            }
            if (hasPermission)
            {
                return;
            }
            else
            {
                context.Result = Content("无权限访问");
                return;
            }
        }