发了一个关于HTTPModule的问题没人理，再发一次！

[foyuan]

看到一段通过HttpModule来控制权限的代码，但是总是想不出来下面代码中注释的地方改怎么写,就是下面的“//根据url得到所在的模块”这个地方，该怎么写呢？请高手指点一下，谢谢！！！！！
namespace MyModule
{
public class MyModule : IHttpModule
{
public void Init(HttpApplication application)
{
application. AcquireRequestState += (new
EventHandler(this.Application_AcquireRequestState));

}
private void Application_AcquireRequestState (Object source,
EventArgs e)
{
HttpApplication Application = (HttpApplication)source;
User user=Application.Context.Sesseion["User"] //获取User
string url=Application.Context.Request.Path;
//获取客户访问的页面

Module module= //根据url得到所在的模块
If(!RightChecker.HasRight(user,module))
Application.Context.Server.Transfer("ErrorPage.aspx");
//如果没有权限，引导到错误处理的页面
}
public void Dispose()
{
}
}
}

[foyuan]

原程序在这里，大家帮忙看看


public class RightChecker
{
public static bool HasRight(User user,Module module)
{
//进行权限校验，
}
}




using System;
using System.Web;
namespace MyModule
{
public class MyModule : IHttpModule
{
public void Init(HttpApplication application)
{
application. AcquireRequestState += (new
EventHandler(this.Application_AcquireRequestState));
}
private void Application_AcquireRequestState (Object source,
EventArgs e)
{
HttpApplication Application = (HttpApplication)source;
User user=Application.Context.Sesseion["User"] //获取User
string url=Application.Context.Request.Path;//获取客户访问的页面

Module module= //根据url得到所在的模块
If(!RightChecker.HasRight(user,module))
Application.Context.Server.Transfer("ErrorPage.aspx");//如果没有权限，引导到错误处理的页面

}
public void Dispose()
{
}
}
}

[saucer]

what is your definition of Module? how is it related to url?

[saucer]

public static bool HasRight(User user,Module module)

what is this "Module" class?? how is it defined? where is it being used?

[niunj]

up

[saucer]

他举例而已，而且说得并不是很清楚，一般不会对模块来设置权限的，你的目的是什
么？根据用户的身份，确认他是否能访问？你看过Forms-based的认证了么？

Custom Authentication provider by implementing IHttpModule, IPrincipal and IIdentity
http://www.codeproject.com/aspnet/AspNetCustomAuth.asp

Roles-Based Authentication
http://www.codeproject.com/aspnet/rolesbasedauthentication.asp

[foyuan]

请思归大哥看这个连接，就是讲的这个方法，在文章的后边：http://dev.csdn.net/develop/article/42/article/44/44454.shtm