asp.net zero 8.2 学习-6-权限控制

青旅半醒 2021-07-26 20:58 314阅读 0赞

asp.net zero给服务配置权限的步骤：

*  定义权限标识符 SIS.Core层 Authorization/AppPermissions.cs
 *  创建权限 SIS.Core层 Authorization/AppAuthorizationProvider.cs
 *  菜单权限配置 SIS.Web.Mvc层 Areas/app/Startup/appNavigationProviders.cs
 *  对应服务及方法权限配置 AbpAuthorize()
 *  权限测试及API访问 https://localhost:44302/api/TokenAuth/Authenticate

## 定义权限标识符 ##

在SIS.Core项目的Authorization/AppPermissions.cs文件中，添加相应的权限

// demo
    public const string Pages_Demo = "Pages.Demo";
    public const string Pages_Demo_Create = "Pages.Demo.Create";
    public const string Pages_Demo_Edit = "Pages.Demo.Edit";
    public const string Pages_Demo_Delete = "Pages.Demo.Delete";

## 创建权限 ##

在SIS.Core层的Authorization/AppAuthorizationProvider.cs中创建权限：  
创建权限过程中，使用了字符串需要多语言配置，在SIS.Core项目下Localization>SIS目录下SIS-zh-Hans.xml配置对应字符串的中文

var demo = pages.CreateChildPermission(AppPermissions.Pages_Demo, L("Demo"));
    demo.CreateChildPermission(AppPermissions.Pages_Demo_Create, L("CreatingNewDemo"));
    demo.CreateChildPermission(AppPermissions.Pages_Demo_Edit, L("EditingDemo"));
    demo.CreateChildPermission(AppPermissions.Pages_Demo_Delete, L("DeletingDemo"));

多语言配置：

<text name="Demo">测试页面</text>
        <text name="DemoHeaderInfo">测试页面副标题</text>
        <text name="CreatingNewDemo">创建测试实体</text>
        <text name="EditingDemo">编辑测试实体</text>
        <text name="DeletingDemo">删除测试实体</text>

## 分配权限 ##

给菜单分配页面权限：

.AddItem(new MenuItemDefinition(
                            appPageNames.Common.Demo,
                            L("Demo"),
                            url: "app/Demo",
                            icon: "flaticon-line-graph",
                            permissionDependency: new SimplePermissionDependency(AppPermissions.Pages_Demo)
                        )

## 给服务类及方法配置权限 ##

using Abp.Application.Services.Dto;
    using Abp.Collections.Extensions;
    using Abp.Domain.Repositories;
    using EDU.SIS.Demo.Dtos;
    using System.Linq;
    using System.Threading.Tasks;
    using Microsoft.EntityFrameworkCore;
    using Abp.Linq.Extensions;
    using System.Linq.Dynamic.Core;
    using Abp.Authorization;
    using EDU.SIS.Authorization;
    
    namespace EDU.SIS.Demo
    {
        /// <summary>
        /// 测试页面服务
        /// </summary>
        [AbpAuthorize(AppPermissions.Pages_Demo)]
        public class DemoObjectAppService : SISAppServiceBase, IDemoObjectAppService
        {
            private readonly IRepository<DemoObject> _demoObjectRepository;
            public DemoObjectAppService(IRepository<DemoObject> demoObjectRepository)
            {
                _demoObjectRepository = demoObjectRepository;
            }
    
            /// <summary>
            /// 创建和修改
            /// </summary>
            /// <param name="input"></param>
            /// <returns></returns>
            [AbpAuthorize(AppPermissions.Pages_Demo)]
            public async Task CreateOrEdit(CreateOrEditDemoObjectDto input)
            {
                if (input.Id==null)
                {
                    //创建
                   await Create(input);
                }
                else
                {
                    //修改
                    await Update(input);
                }
            }
    
            /// <summary>
            /// 创建实体
            /// </summary>
            /// <param name="input"></param>
            /// <returns></returns>
            [AbpAuthorize(AppPermissions.Pages_Demo_Create)]
            private async Task Create(CreateOrEditDemoObjectDto input)
            {
                var demoObject = ObjectMapper.Map<DemoObject>(input);
                await  _demoObjectRepository.InsertAsync(demoObject);
            }
    
            /// <summary>
            /// 修改实体
            /// </summary>
            /// <param name="input"></param>
            /// <returns></returns>
            [AbpAuthorize(AppPermissions.Pages_Demo_Edit)]
            private async Task Update(CreateOrEditDemoObjectDto input)
            {
                var demoObject = await _demoObjectRepository.FirstOrDefaultAsync((int)input.Id);
                var demo = ObjectMapper.Map(input, demoObject);
    
                //await _demoObjectRepository.UpdateAsync(demo);
            }
    
            /// <summary>
            /// 数据删除
            /// </summary>
            /// <param name="input"></param>
            /// <returns></returns>
            [AbpAuthorize(AppPermissions.Pages_Demo_Delete)]
            public async Task Delete(EntityDto input)
            {
                //先查询再修改
                //var demoObject = await _demoObjectRepository.GetAsync(input.Id);
                //await _demoObjectRepository.DeleteAsync(demoObject);
    
                //直接删除实体，注意转换id，不转换则删不了
                await _demoObjectRepository.DeleteAsync((int)input.Id);
            }
    
            /// <summary>
            /// 分页查询所有实体
            /// </summary>
            /// <param name="input">分页排序筛选</param>
            /// <returns></returns>
            public async Task<PagedResultDto<GetDemoObjectForViewDto>> GetAll(GetAllDemoObjectInput input)
            {
                //注意这里要用Abp.Linq.Extensions，否则返回的是IEnumerable类型
                var filter = _demoObjectRepository.GetAll()
                    .WhereIf(!string.IsNullOrWhiteSpace(input.Filter), e => e.Name.Contains(input.Filter))
                    .WhereIf(!string.IsNullOrWhiteSpace(input.NameFilter), e => e.Name.Equals(input.NameFilter));
    
                //先排序，再映射
                filter = filter.OrderBy(input.Sorting ?? "id asc");//OrderBy来自System.Linq.Dynamic.Core
    
                var query = (from o in filter
                             orderby o.Id
                             select new GetDemoObjectForViewDto()
                             {
                                 DemoObject = ObjectMapper.Map<DemoObjectDto>(o)
                             });
    
                var totalCount = await query.CountAsync(); //CountAsync来自Abp.Linq.Extensions
    
                var demoObject = await query
                    .PageBy(input)
                    .ToListAsync();
    
    
                var result = new PagedResultDto<GetDemoObjectForViewDto>()
                {
                    TotalCount = totalCount,
                    Items = demoObject
                };
                return result;
    
            }
    
            /// <summary>
            /// 获取修改数据详情
            /// </summary>
            /// <param name="input"></param>
            /// <returns></returns>
            public async Task<GetDemoObjectForEditOutput> GetDemoObjectForEdit(EntityDto input)
            {
                var demoObject = await _demoObjectRepository.GetAsync(input.Id);
                var result = new GetDemoObjectForEditOutput()
                {
                    DemoObject = ObjectMapper.Map<DemoObjectDto>(demoObject)
                };
                return result;
            }
    
            /// <summary>
            /// 获取单条数据
            /// </summary>
            /// <param name="id"></param>
            /// <returns></returns>
            public async Task<GetDemoObjectForViewDto> GetDemoObjectForView(int id)
            {
                var demoObject = await _demoObjectRepository.GetAsync(id);
                var result = new GetDemoObjectForViewDto()
                {
                   DemoObject =  ObjectMapper.Map<DemoObjectDto>(demoObject)
                };
                return result;
            }
        }
    }

## 权限测试及API访问 ##

\#\#\#页面权限  
运行应用程序，在管理->角色点击修改，能够看到我们定义的权限：  
![format_png][]

### API请求token ###

由于我们加了权限，需要通过请求token，才能有权限访问服务，请求accesstoken地址：https://localhost:44302/api/TokenAuth/Authenticate 具体配置如下图：  
header要加上租户ID，应为系统默认开启了多租户，可以在SIS.Core项目SISCoreModule.cs中查看到`Configuration.MultiTenancy.IsEnabled = SISConsts.MultiTenancyEnabled;`  
![format_png 1][]

body加上用户名和密码：  
![format_png 2][]

### 带token分页查询 ###

查询需要复制上一步请求的accesstoken,在分页查询请求中的Header添加Authorization,具体如下图，添加accesstoken就可以请求成功：  
![format_png 3][]  
同样带token添加实体也是与分页查询一样：  
![format_png 4][]

[format_png]: /images/20210726/972feff8914f4eac9d51aa614c36c347.png
[format_png 1]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDE4LmNuYmxvZ3MuY29tL2Jsb2cvNzQwMTAwLzIwMjAwMi83NDAxMDAtMjAyMDAyMjQxMTU5MjI3NTMtMTA1NzcxNTc2MS5wbmc?x-oss-process=image/format,png
[format_png 2]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDE4LmNuYmxvZ3MuY29tL2Jsb2cvNzQwMTAwLzIwMjAwMi83NDAxMDAtMjAyMDAyMjQxMjAwMDQzMjctNjkyMzg0NTEwLnBuZw?x-oss-process=image/format,png
[format_png 3]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDE4LmNuYmxvZ3MuY29tL2Jsb2cvNzQwMTAwLzIwMjAwMi83NDAxMDAtMjAyMDAyMjQxMjAzMTcxODktODkzNDYzMjk2LnBuZw?x-oss-process=image/format,png
[format_png 4]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDE4LmNuYmxvZ3MuY29tL2Jsb2cvNzQwMTAwLzIwMjAwMi83NDAxMDAtMjAyMDAyMjQxMjA0MDYyOTQtMTgyMzk1Njc1NS5wbmc?x-oss-process=image/format,png