代码如下：
这是web.config配置
<authentication mode="Forms">
<forms protection="All" defaultUrl="ParentFrame/main.aspx" loginUrl="Login.aspx" name="UserCookie" timeout="3600"></forms>
</authentication>
<authorization>
<deny users="?"></deny>
</authorization>
<!--以下为角色验证-->
<location path="UserManage.aspx">
<system.web>
<authorization>
<allow roles="user"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
<location path="BackupManage.aspx">
<system.web>
<authorization>
<allow roles="backup"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
protected void Image1_Click(object sender, ImageClickEventArgs e)//登录按钮
{
if (Page.IsValid)
{
MyUser user = (MyUser)Session["User"];
FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(1, user.U_Name, DateTime.Now, DateTime.Now.AddMinutes(30), false,user.U_Purview,"/");
string hashTicket = FormsAuthentication.Encrypt(ticket);
HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, hashTicket);
Context.Response.Cookies.Add(cookie);
Response.Redirect("ParentFrame/main.aspx");
}
}
protected void CustomValidator1_ServerValidate(object source, ServerValidateEventArgs args)//验证用户名或者密码是否正确
{
DataSourceSelectArguments da = new DataSourceSelectArguments();
Sqldatasource1.SelectCommand = "SELECT U_ID, U_Name, U_Password, U_Enable, U_Type, U_Expires, U_mobile, U_Email, U_Purview, U_Remark FROM `user` WHERE (U_Name = '" + textfield.Value.Trim() + "') AND (U_Password = '" + textfield2.Value.Trim() + "') and (u_type = '系统用户')";
DataView dv = (DataView)Sqldatasource1.Select(da);
if (dv.Count == 0)
{
args.IsValid = false;
}
else
{
//把登录的用户信息保存为session
MyUser user = new MyUser();
DataTable dt = dv.Table;
user.U_ID = (int)dt.Rows[0]["U_ID"];
user.U_Name = (string)dt.Rows[0]["U_Name"];
user.U_Password = (string)dt.Rows[0]["U_Password"];
user.U_Enable = (Boolean)dt.Rows[0]["U_Enable"];
user.U_Type = (string)dt.Rows[0]["U_Type"];
user.U_Expires = (DateTime)dt.Rows[0]["U_Expires"];
user.U_Mobile = (string)dt.Rows[0]["U_Mobile"];
user.U_Email = (string)dt.Rows[0]["U_Email"];
user.U_Purview = (string)dt.Rows[0]["U_Purview"];
user.U_Remark = (string)dt.Rows[0]["U_Remark"];
Session["User"] = user;
args.IsValid = true;
}
}
protected void Application_AuthorizeRequest(object sender, System.EventArgs e)//全局事件，把角色信息添加到GenericPrincipal中
{
HttpApplication App = (HttpApplication)sender;
HttpContext Ctx = App.Context; //获取本次Http请求相关的HttpContext对象
if (Ctx.Request.IsAuthenticated == true) //验证过的用户才进行role的处理
{
FormsIdentity Id = (FormsIdentity)Ctx.User.Identity;
FormsAuthenticationTicket Ticket = Id.Ticket; //取得身份验证票
string[] Roles = Ticket.UserData.Split(','); //将身份验证票中的role数据转成字符串数组
Ctx.User = new System.Security.Principal.GenericPrincipal(Id, Roles); //将原有的Identity加上角色信息新建一个GenericPrincipal表示当前用户,这样当前用户就拥有了role信息
}
}
