MVC中如何利用filter实现权限管理

定义filter:

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Web.Mvc;
using System.Web;
using System.Web.Routing;
using Vslea.Models;

namespace Vslea.Filters
{
public class RoleAttribute:ActionFilterAttribute,IAuthorizationFilter
{
public RoleAttribute(RoleTypeEnum roleType)
{
this.RoleType = roleType;
}
public RoleTypeEnum RoleType { get; set; }

public void OnAuthorization(AuthorizationContext filterContext)
{
HttpContextBase b = filterContext.RequestContext.HttpContext;
UserModel model = b.Session["User"] as UserModel;
if (model != null)
{
if (model.RoleType != this.RoleType)
{
filterContext.Result = new RedirectToRouteResult("default", new RouteValueDictionary(new { controller = "Shared", action = "Error" }));
}
}
}
}
}

在controller中：

[AcceptVerbs(HttpVerbs.Get)]
[Role(RoleTypeEnum.Admin)]
public ActionResult NewCustomer(int? customerId)
{
}

简单又方便，使代码结构更加清晰