自定义AuthorizeAttribute

   /// <summary>
    /// 自定义AuthorizeAttribute
    /// </summary>
    public class UserAuthorizeAttribute : FilterAttribute, IAuthorizationFilter, IActionFilter
    {
        IPagePermissionManager _pagePermissionManager;
        IRoleManager _roleManager;
        IUserManager _userManager;
        //ICache _cache;
        private UserEntity _currentUser;
        private string _parameter;

        public UserAuthorizeAttribute()
        {
            this._pagePermissionManager = (IPagePermissionManager)DependencyResolver.Current.GetService(typeof(IPagePermissionManager));
            this._roleManager = (IRoleManager)DependencyResolver.Current.GetService(typeof(IRoleManager));
            this._userManager = (IUserManager)DependencyResolver.Current.GetService(typeof(IUserManager));
            //this._cache = (ICache)DependencyResolver.Current.GetService(typeof(ICache));
        }
        public void OnAuthorization(AuthorizationContext filterContext)
        {
            //base.OnAuthorization(filterContext);
            //string area = filterContext.RouteData.DataTokens["area"].ToString();
            string controller = filterContext.RouteData.Values["controller"].ToString();
            string action = filterContext.RouteData.Values["action"].ToString();
            //验证Html.SecurityActionLink 中的操作方法
            bool isCheckSecurityActionLink = false;
            if (filterContext.ActionDescriptor != null)
            {
                string _controller = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName;
                string _actionName = filterContext.ActionDescriptor.ActionName;
                if (_controller != controller)
                {
                    controller = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName;
                    isCheckSecurityActionLink = true;
                }
                if (_actionName != action)
                {
                    action = filterContext.ActionDescriptor.ActionName;
                    isCheckSecurityActionLink = true;
                }
            }
            //获取Route Url中的参数
            int organizationId = 0;
            if (filterContext.ActionDescriptor != null && filterContext.ActionDescriptor.GetParameters() != null)
            {
                organizationId = ObjectExtensions.ToInt32(filterContext.ActionDescriptor.GetParameters().FirstOrDefault(t => t.ParameterName == "api_orgId"), 0);
            }
            //int organizationId = ObjectExtensions.ToInt32(filterContext.HttpContext.Request.QueryString["api_orgId"], 0);
            string path = filterContext.RequestContext.HttpContext.Server.MapPath("/Config/PagePermission.config");

            string userData = string.Empty;
            _currentUser = null;

            if (filterContext.HttpContext.User.Identity.IsAuthenticated)
            {
                HttpCookie authCookie = filterContext.HttpContext.Request.Cookies[FormsAuthentication.FormsCookieName];
                if (authCookie != null)
                {
                    FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);//解密 
                    userData = authTicket.UserData;
                    if (!string.IsNullOrEmpty(userData))
                    {
                        string[] arrUserData = userData.Split(new string[] { "," }, StringSplitOptions.RemoveEmptyEntries);
                        _currentUser = new UserEntity();
                        _currentUser.UserID = ObjectExtensions.ToInt32(arrUserData[0], 0);
                        _currentUser.UserName = arrUserData[1];
                        _currentUser.TrueName = arrUserData[2];
                        _currentUser.OrganizationID = ObjectExtensions.ToInt32(arrUserData[3], 0);
                        _currentUser.InheritFromGroup = string.Compare(arrUserData[4], "True") == 0 ? true : false;

                        ////获取当前用户在当前页面所属模块的所有操作权限
                        //List<int> operateCodeList = new List<int>();
                        //if (!string.IsNullOrEmpty(controller) && !string.IsNullOrEmpty(action))
                        //{
                        //    string pageUrl = controller + "/" + action;
                        //    int moduleId = _pagePermissionManager.GetModuleID(pageUrl);
                        //    List<PagePermission> pagePermissionList = _pagePermissionManager.GetPagePermissionList(moduleId);
                        //    foreach (PagePermission pagePermission in pagePermissionList)
                        //    {
                        //        if (!string.IsNullOrEmpty(pagePermission.PageUrl))
                        //        {
                        //            string[] arrayPageUrl = pagePermission.PageUrl.Split(new string[] { "/" }, StringSplitOptions.RemoveEmptyEntries);
                        //            string controllerName = string.Empty;
                        //            string actionName = string.Empty;
                        //            if (arrayPageUrl.Length > 2)
                        //            {
                        //                controllerName = arrayPageUrl[1];
                        //                actionName = arrayPageUrl[2];
                        //            }
                        //            else
                        //            {
                        //                controllerName = arrayPageUrl[0];
                        //                actionName = arrayPageUrl[1];
                        //            }
                        //            if (!string.IsNullOrEmpty(controllerName) && !string.IsNullOrEmpty(actionName))
                        //            {
                        //                if (this.IsAllowed(path, controllerName, actionName, organizationId))
                        //                {
                        //                    operateCodeList.Add(pagePermission.OperateCode);
                        //                }
                        //            }
                        //        }
                        //    }
                        //}
                        //_currentUser.OperateCodeList = operateCodeList;

                        //获取当前用户有权限的模块权限码
                        _currentUser.ModuleCodeList = GetModuleCodeList();

                    }
                }
            }

            _parameter = "currentUser";

            //filterContext.Controller.ViewBag.currentUser = _currentUser;

            bool isAllowed = this.IsAllowed(path, controller, action, organizationId);
            if (!isAllowed)
            {
                if (isCheckSecurityActionLink)
                {
                    filterContext.Result = new ViewResult();
                }
                else
                {
                    filterContext.RequestContext.HttpContext.Response.Write("对不起，您没有权限！");
                    filterContext.RequestContext.HttpContext.Response.End();
                }
            }
        }
        public void OnActionExecuted(ActionExecutedContext filterContext)
        {
            if (filterContext.HttpContext.User.Identity.IsAuthenticated)
            {
                filterContext.Controller.ViewBag.currentUser = _currentUser;
            }
        }

        public void OnActionExecuting(ActionExecutingContext filterContext)
        {
            if (filterContext.ActionParameters.ContainsKey(_parameter))
            {
                filterContext.ActionParameters[_parameter] = _currentUser;
            }
        }
        /// <summary>
        /// 验证页面权限
        /// </summary>
        /// <param name="path"></param>
        /// <param name="controller"></param>
        /// <param name="action"></param>
        /// <returns></returns>
        public bool IsAllowed(string path, string controller, string action, int organizationId)
        {
            bool isAllowed = false;
            if (!string.IsNullOrEmpty(controller) && !string.IsNullOrEmpty(action))
            {
                string pageUrl = controller + "/" + action;

                //不检查NoCheckedPage.config 中配置的页面
                string noCheckedPagePath = "/Config/NoCheckedPage.config";
                List<string> noCheckedPageUrlList = XmlManager.GetAttributesValue(noCheckedPagePath, "PageUrl");
                if (noCheckedPageUrlList.Contains(pageUrl))
                {
                    return true;
                }

                UserEntity userEntity = _currentUser;
                //用户是否登录
                if (!HttpContext.Current.User.Identity.IsAuthenticated)
                {
                    return false;
                }
                if (userEntity == null)
                {
                    return false;
                }
                int userId = userEntity.UserID;

                //用户是否属于指定的部门
                if (organizationId > 0)
                {
                    if (organizationId != userEntity.OrganizationID)
                    {
                        return false;
                    }
                }
                List<int> userRolesId = GetUserRolesId(userId, userEntity.InheritFromGroup);

                //超级管理员不用验证
                if (userRolesId.Contains((int)SuperManagerEnum.SuperManager))
                {
                    isAllowed = true;
                }
                else
                {
                    if (!string.IsNullOrEmpty(path))
                    {
                        List<PagePermission> list = _pagePermissionManager.DeserializeToList<PagePermission>(path);
                        //List<PagePermission> list = _cache.Get<List<PagePermission>>("ciwong_admin_permission_pagepermissionlist");
                        //if (list == null || list.Count == 0)
                        //{
                        //    list = _pagePermissionManager.DeserializeToList<PagePermission>(path);
                        //    _cache.Add<List<PagePermission>>("ciwong_admin_permission_pagepermissionlist", list, 1200);
                        //}
                        if (list.Count > 0)
                        {
                            //处理带空白符URL，不区分大小写
                            PagePermission pagePermission = list.FirstOrDefault(t => t.PageUrl.Trim().ToLower() == pageUrl.Trim().ToLower());
                            if (pagePermission != null)
                            {
                                //用户的模块权限是否被禁止
                                List<DisableUserPermission> disableUserPermissionList = new List<DisableUserPermission>();
                                disableUserPermissionList = _userManager.GetDisableUserPermission(userId, pagePermission.ModuleID, pagePermission.ModuleCode);
                                foreach (DisableUserPermission disableUserPermission in disableUserPermissionList)
                                {
                                    if ((pagePermission.OperateCode & disableUserPermission.OperateCode) == pagePermission.OperateCode)
                                    {
                                        return false;
                                    }
                                }
                                //用户是否拥有模块权限
                                List<Roles_ModulePermission> rolesModelPermissionList = new List<Roles_ModulePermission>();
                                rolesModelPermissionList = _roleManager.GetRolesModulePermission(userRolesId, pagePermission.ModuleID, pagePermission.ModuleCode);
                                foreach (Roles_ModulePermission rolesModelPermission in rolesModelPermissionList)
                                {
                                    if ((pagePermission.OperateCode & rolesModelPermission.OperateCode) == pagePermission.OperateCode)
                                    {
                                        isAllowed = true;
                                    }
                                }
                            }
                        }
                    }
                }
            }
            return isAllowed;
        }
        /// <summary>
        /// 获取当前用户的模块权限
        /// </summary>
        /// <returns></returns>
        public List<string> GetModuleCodeList()
        {
            List<string> moduleCodeList = new List<string>();

            UserEntity userEntity = _currentUser;
            //用户是否登录
            if (!HttpContext.Current.User.Identity.IsAuthenticated)
            {
                return moduleCodeList;
            }
            if (userEntity == null)
            {
                return moduleCodeList;
            }
            int userId = userEntity.UserID;
            List<int> userRolesId = GetUserRolesId(userId, userEntity.InheritFromGroup);

            //超级管理员拥有所有模块的权限
            if (userRolesId.Contains((int)SuperManagerEnum.SuperManager))
            {
                moduleCodeList.Add("SuperManager");
            }
            else
            {
                List<Roles_ModulePermission> rolesModulePermissionList = _roleManager.GetRolesModulePermission(userRolesId);
                List<DisableUserPermission> disableUserPermissionList = _userManager.GetDisableUserPermissionList(userId);
                if (disableUserPermissionList.Count > 0)
                {
                    List<string> disableUserPermissionCode = disableUserPermissionList.Select(t => t.ModuleCode).ToList();
                    foreach (Roles_ModulePermission rolesModulePermission in rolesModulePermissionList)
                    {
                        if (!disableUserPermissionCode.Contains(rolesModulePermission.ModuleCode))
                        {
                            moduleCodeList.Add(rolesModulePermission.ModuleCode);
                        }
                    }
                }
                else
                {
                    moduleCodeList = rolesModulePermissionList.Select(t => t.ModuleCode).ToList();
                }
            }

            return moduleCodeList;
        }

        private List<int> GetUserRolesId(int userId, bool inheritFromGroup)
        {
            List<int> userRolesId = new List<int>();
            List<int> userGroupRolesId = new List<int>();
            if (inheritFromGroup)
            {
                int groupId = _userManager.GetGroupID(userId);
                if (groupId > 0)
                {
                    userGroupRolesId = _roleManager.GetUserGroupRoles(groupId);
                }
                //合并用户角色
                userRolesId = _roleManager.GetUserRoles(userId);
                if (userGroupRolesId.Count > 0 && userRolesId.Count > 0)
                {
                    userRolesId = userRolesId.Union(userGroupRolesId).ToList<int>();
                }
            }
            else
            {
                userRolesId = _roleManager.GetUserRoles(userId);
            }
            return userRolesId;
        }
    }