用事件的方式实现DataSnap服务器的接口授权

procedure TServerContainer1.DSAuthenticationManager1UserAuthenticate(
  Sender: TObject; const Protocol, Context, User, Password: string;
  var valid: Boolean; UserRoles: TStrings);
begin
  { TODO : Validate the client user and password.
    If role-based authorization is needed, add role names to the UserRoles parameter  }

  if (User = ‘Admin‘) and (Password = ‘123456‘) then
  begin
    valid := True ;
    UserRoles.Add(‘AdminGroup‘); //加入到AdminGroup组别
  end else
  if (User = ‘Guest‘) and (Password = ‘123456‘) then
  begin
    valid := True ;
    UserRoles.Add(‘GuestGroup‘); //加入到GuestGroup组别
  end else
  valid := False ;
end;

procedure TServerContainer1.DSAuthenticationManager1UserAuthorize(
  Sender: TObject; EventObject: TDSAuthorizeEventObject;
  var valid: Boolean);
begin
  { TODO : Authorize a user to execute a method.
    Use values from EventObject such as UserName, UserRoles, AuthorizedRoles and DeniedRoles.
    Use DSAuthenticationManager1.Roles to define Authorized and Denied roles
    for particular server methods. }
  if EventObject.MethodAlias = ‘TServerMethods1.EchoString‘ then
  begin
    valid := EventObject.UserRoles.IndexOf(‘AdminGroup‘) <> -1;
  end;

  if EventObject.MethodAlias = ‘TServerMethods1.ReverseString‘ then
  begin
    valid := EventObject.UserRoles.IndexOf(‘GuestGroup‘) <> -1;
  end;
end;