blocks|key|1106419|text|。。很简单，我相信你想要这样的东西？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1106420|Quick+and+dirty+role+management|offset|length|1106421|[Authorize(Roles+=+"Admins")]
public+ActionResult+Register()
{
++ViewData["roleName"]+=+new+SelectList(Roles.GetAllRoles(),+"roleName");
++ViewData["PasswordLength"]+=+MembershipService.MinPasswordLength;
++return+View();
}|code-block|syntax|javascript|1106422|entityMap|0|LINK|mutability|MUTABLE|url|http://rtur.net/blog/post/2009/06/03/Quick-and-dirty-role-management-in-ASPNET-MVC.aspx^0|0|0|V|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@$D|U|E|V|1|W]]|A|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|A|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

.. very crudely I believe you want something like this?

<a href="http://rtur.net/blog/post/2009/06/03/Quick-and-dirty-role-management-in-ASPNET-MVC.aspx" rel="nofollow noreferrer">Quick and dirty role management</a>

<pre><code>[Authorize(Roles = "Admins")]
public ActionResult Register()
{
 ViewData["roleName"] = new SelectList(Roles.GetAllRoles(), "roleName");
 ViewData["PasswordLength"] = MembershipService.MinPasswordLength;
 return View();
}
</code></pre>

blocks|key|1106444|text|如果您的所有管理代码都在一个控制器中，则向整个类添加Authorize。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1106445|[Authorize]
public+class+AdminController+:+Controller
{
+++++.......
}|code-block|syntax|javascript|1106446|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If all of your admin code is in one controller then add Authorize to the entire class.

<pre><code>[Authorize]
public class AdminController : Controller
{
 .......
}
</code></pre>

blocks|key|1106488|text|我刚开始做这个...但到目前为止，这对我来说工作得很好。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1106489|我创建了一个自定义AuthorizeAttribute类，并将其添加到RegisterGlobalFilters函数中。|1106490|在CustomAuthorizeAttribute中，我根据它所在的区域检查各种条件。|1106491|public+class+FilterConfig
{
++++public+static+void+RegisterGlobalFilters(GlobalFilterCollection+filters)
++++{
++++++++filters.Add(new+CustomAuthorizeAttribute());
++++++++filters.Add(new+HandleErrorAttribute());
++++}
}

public+class+CustomAuthorizeAttribute+:+AuthorizeAttribute
{
++++protected+override+bool+AuthorizeCore(HttpContextBase+httpContext)
++++{
++++++++var+routeData+=+httpContext.Request.RequestContext.RouteData;
++++++++var+controller+=+routeData.GetRequiredString("controller");
++++++++var+action+=+routeData.GetRequiredString("action");
++++++++var+area+=+routeData.DataTokens["area"];
++++++++var+user+=+httpContext.User;
++++++++if+(area+!=+null+&&+area.ToString()+==+"Customer")
++++++++{
++++++++++++if+(!user.Identity.IsAuthenticated)
++++++++++++++++return+false;
++++++++}
++++++++else+if+(area+!=+null+&&+area.ToString()+==+"Admin")
++++++++{
++++++++++++if+(!user.Identity.IsAuthenticated)
++++++++++++++++return+false;
++++++++++++if+(!user.IsInRole("Admin"))
++++++++++++++++return+false;
++++++++}
++++++++return+true;
++++}
}|code-block|syntax|javascript|1106492|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|O|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|P|8|@]|9|@]|A|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

I just started on this... but so far this is working pretty good for me.

I create a custom AuthorizeAttribute class and add this in the RegisterGlobalFilters function. 

In CustomAuthorizeAttribute I check for various conditions based on the area it is in.

<pre><code>public class FilterConfig
{
 public static void RegisterGlobalFilters(GlobalFilterCollection filters)
 {
 filters.Add(new CustomAuthorizeAttribute());
 filters.Add(new HandleErrorAttribute());
 }
}

public class CustomAuthorizeAttribute : AuthorizeAttribute
{
 protected override bool AuthorizeCore(HttpContextBase httpContext)
 {
 var routeData = httpContext.Request.RequestContext.RouteData;
 var controller = routeData.GetRequiredString("controller");
 var action = routeData.GetRequiredString("action");
 var area = routeData.DataTokens["area"];
 var user = httpContext.User;
 if (area != null &amp;&amp; area.ToString() == "Customer")
 {
 if (!user.Identity.IsAuthenticated)
 return false;
 }
 else if (area != null &amp;&amp; area.ToString() == "Admin")
 {
 if (!user.Identity.IsAuthenticated)
 return false;
 if (!user.IsInRole("Admin"))
 return false;
 }
 return true;
 }
}
</code></pre>

blocks|key|1106530|text|在startup.cs中使用区域名称和带AuthorizeAreaFolder的斜杠对我来说很有效：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1106531|services.AddRazorPages()
++++++++.AddRazorPagesOptions(options+=>+options.Conventions.AuthorizeAreaFolder("Admin",+"/"))
++++++++.WithRazorPagesAtContentRoot();|code-block|syntax|javascript|1106532|entityMap^0|K|J|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

Using the area name and just a slash with <code>AuthorizeAreaFolder</code> in startup.cs worked for me:

<pre><code>services.AddRazorPages()
 .AddRazorPagesOptions(options =&gt; options.Conventions.AuthorizeAreaFolder("Admin", "/"))
 .WithRazorPagesAtContentRoot();
</code></pre>

I've an Admin area and I want only Admins to enter the area. I considered adding the Authorized attribute to every controller in the Admin area. Isn't there an elegant solution or is this feature not there in the framework itself?

EDIT:
I'm sorry, I should to have mentioned this before. I'm using a custom AuthorizedAttribute derived from AuthorizeAttribute.

How can we set authorization for a whole area in ASP.NET MVC?

我有一个管理区，我只想管理员进入该区域。我考虑将授权属性添加到Admin区域中的每个控制器。有没有一个优雅的解决方案，或者框架本身没有这个特性？编辑:很抱歉，我应该在之前提到这一点。我使用的是从AuthorizeAttribute派生的自定义AuthorizedAttribute。

问如何在ASP.NET MVC中设置整个区域的授权？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在ASP.NET MVC中设置整个区域的授权？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在ASP.NET MVC中设置整个区域的授权？
EN