Enterprise Library 2.0 -- Security Application Block

yzd

浏览: 1813490 次
性别:
来自: 北京

最近访客更多访客>>

churchchen86

devcang

ecs2003

southking

博主相关

博客

微博

相册

留言

关于我

文章分类

全部博客 (1784)

社区版块

存档分类

今天来介绍一下Enterprise Library 2.0中的Security Application Block ，它可以帮助程序开发者在应用程序中实现与授权有关的大部分功能，不仅如此，它还支持缓存我们系统中用户的授权以及，授权数据。主要包括一下几个部分的功能：
1、减少代码编写量；
2、保持应用程序中安全管理的一致性；
3、提供了应用程序中很多安全问题的实现方法；
4、可扩展，支持自定义Provider。
...
 关于Security Application Block的介绍部分，我不再多说，具体可以参考帮助文档。下面我们来看一下如何配置Security Application Block,首先打开配置工具，新建一个Security Application Block,如下：
<img border="0" alt="" src="http://pw.cnblogs.com/images/cnblogs_com/pw/641.gif">

然后在Authorization节点下创建一个Authorization Rule Provider,名称为RuleProvider,如下：

<img border="0" alt="" src="http://pw.cnblogs.com/images/cnblogs_com/pw/642.gif">

现在就可以在RuleProvider节点下，创建一系列的规则(Rule)了。如下图：

<img border="0" alt="" src="http://pw.cnblogs.com/images/cnblogs_com/pw/643.gif">

新建了规则，我们还需要为这个规则定义一个表达式，用于在程序中判断是否满足该规则，如下图：

<img border="0" alt="" src="http://pw.cnblogs.com/images/cnblogs_com/pw/644.gif">

如图所示，我们定义了能通过该规则的用户的身份必须是User或Admin.我们可以根据我们的实际需要定义各种各样的规则。
最后我们可以为我们建立的Security Application Block分配一个默认的Authorization实例，如图：
<img border="0" alt="" src="http://pw.cnblogs.com/images/cnblogs_com/pw/645.gif">

此时，我们的配置文件中就多了如下内容：

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><sectionname="securityConfiguration"type="Microsoft.Practices.EnterpriseLibrary.Security.Configuration.SecuritySettings,Microsoft.Practices.EnterpriseLibrary.Security,Version=2.0.0.0,Culture=neutral,PublicKeyToken=null"/>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><securityConfigurationdefaultAuthorizationInstance="RuleProvider"
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">defaultSecurityCacheInstance="">
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><authorizationProviders>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><addtype="Microsoft.Practices.EnterpriseLibrary.Security.AuthorizationRuleProvider,Microsoft.Practices.EnterpriseLibrary.Security,Version=2.0.0.0,Culture=neutral,PublicKeyToken=null"
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">name="RuleProvider">
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><rules>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><addexpression="R:UserORR:Admin"name="Rule"/>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"></rules>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"></add>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"></authorizationProviders>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"></securityConfiguration>
</div>
 关于Security Application Block的配置就说到这里。
 下面来看看Enterprise Library 2.0 的Security Application Block 与1.0版本中的一点区别，因为ASP.NET2.0中提供了角色与成员管理的新特性，所以在某些方面和1.0版本还是有一定的区别：
因为ASP.NET2.0提供了MemberShip,Roles两个类，其中包含了验证用户、角色管理以及对Profile信息的设置与读取功能，所以 Security Application Block 2.0将这些功能去掉了。因此和1.0版本的主要区别在于下面三方面：

首先导入下面两个命名空间:
using System.Web.Profile;
using System.Web.Security;

1、验证用户的方法如下：

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" id="Codehighlighter1_8_11_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_8_11_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif">/**//**//**////<summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///验证用户
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///http://pw.cnblogs.com
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///</summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///<paramname="username">用户名</param>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///<paramname="password">密码</param>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">///<returns></returns>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">publicboolCheckUser(stringusername,stringpassword)
<img align="top" alt="" id="Codehighlighter1_297_371_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_297_371_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">returnMembership.ValidateUser(username,password);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>
2、读取或设置Profile信息

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" id="Codehighlighter1_8_11_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_8_11_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif">/**//**//**////<summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///使用Profile
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///http://pw.cnblogs.com
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">///</summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">[TestMethod]
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">publicvoidUseProfile()
<img align="top" alt="" id="Codehighlighter1_168_885_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_168_885_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">IIdentityidentity;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">identity=newGenericIdentity("SHY520",Membership.Provider.Name);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//设置Profile
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">ProfileBasesetuserProfile=ProfileBase.Create(identity.Name);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">setuserProfile["Name"]="SHY520";
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">setuserProfile["Address"]="WuhuChina";
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//保存Profile信息
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">setuserProfile.Save();
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//读取Profile信息
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">ProfileBasereaduserProfile=ProfileBase.Create(identity.Name);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">stringName=readuserProfile["Name"].ToString();
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">stringAddress=readuserProfile["Address"].ToString();
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">Assert.AreEqual(Name,"SHY520");
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">Assert.AreEqual(Address,"WuhuChina");
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>

3、得到某个用户所属角色列表

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" id="Codehighlighter1_8_11_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_8_11_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif">/**//**//**////<summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///得到某用户所属角色列表
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///http://pw.cnblogs.com
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///</summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">///<returns>角色列表</returns>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">publicstring[]GetUserRoles()
<img align="top" alt="" id="Codehighlighter1_190_349_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_190_349_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">IIdentityidentity=newGenericIdentity("SHY520",Membership.Provider.Name);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">returnRoles.GetRolesForUser(identity.Name);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>
 与上一个版本的区别基本上就是以上几点，下面我们来看看Security Application Block2.0的基本使用方法：
1、为已授权的用户分配一个Token(记号):
Security Application Block将授权用户的身份信息放进缓存，并返回一个Token,所以我们在使用此方之前需要先配置一个Security Cache，具体方法我就不多说了，可以参考官方教程，下面贴出配置后的App.Config中的代码：

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><securityCacheProviders>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><addcacheManagerInstanceName="CacheManager"defaultSlidingSessionExpirationInMinutes="10"
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">defaultAbsoluteSessionExpirationInMinutes="60"type="Microsoft.Practices.EnterpriseLibrary.Security.Cache.CachingStore.CachingStoreProvider,Microsoft.Practices.EnterpriseLibrary.Security.Cache.CachingStore,Version=2.0.0.0,Culture=neutral,PublicKeyToken=null"
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">name="CachingStoreProvider"/>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"></securityCacheProviders>
</div>
这段代码是在securityConfiguration节中的，其中cacheManagerInstanceName是我们在Caching Application Block中配置的实例。

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" id="Codehighlighter1_8_11_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_8_11_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif">/**//**//**////<summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///使用SaveIdentity方法，保存用户身份，并返回一个Token
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///http://pw.cnblogs.com
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///</summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">///<returns></returns>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">publicITokenSaveUserInfo()
<img align="top" alt="" id="Codehighlighter1_207_430_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_207_430_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">ISecurityCacheProvidersc=SecurityCacheFactory.GetSecurityCacheProvider("CacheManager");
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//将用户身份装入缓存，并返回一个IToken类型的记号
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">returnsc.SaveIdentity(newGenericIdentity("SHY520"));
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>

2、使用Token来验证用户是否已被授权

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" id="Codehighlighter1_8_11_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_8_11_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif">/**//**//**////<summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///根据Token来判断用户是否已被授权
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///http://pw.cnblogs.com
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///</summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///<paramname="token"></param>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">///<returns></returns>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">publicboolCheckUserByToken(ITokentoken)
<img align="top" alt="" id="Codehighlighter1_246_547_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_246_547_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">ISecurityCacheProvidersc=SecurityCacheFactory.GetSecurityCacheProvider("CacheManager");
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//得到Token对应的身份IIdentity
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">IIdentitysavedIdentity=sc.GetIdentity(token);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//返回该身份是否已被授权
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">returnsavedIdentity.IsAuthenticated;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>

3、结束User Session(即使Token过期)

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" id="Codehighlighter1_8_11_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_8_11_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif">/**//**//**////<summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///使用户Token过期
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///http://pw.cnblogs.com
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">///</summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">publicvoidCloseUserSession()
<img align="top" alt="" id="Codehighlighter1_153_419_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_153_419_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">ISecurityCacheProvidersc=SecurityCacheFactory.GetSecurityCacheProvider("CacheManager");
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//保存身份
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">ITokentoken=sc.SaveIdentity(newGenericIdentity("SHY520"));
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//使身份过期
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">sc.ExpireIdentity(token);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>
4、判断用户是否满足一定的规则
首先需要导入下面的命名空间：
using System.Security;
using System.Security.Principal;
using Microsoft.Practices.EnterpriseLibrary.Security;

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" id="Codehighlighter1_4_7_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_4_7_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif">/**//**//**////<summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///判断用户是否满足一定的规则
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///http://pw.cnblogs.com
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///</summary>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///<paramname="username">用户名称</param>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///<paramname="role">角色名称</param>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">///<paramname="rule">规则名称</param>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">///<returns></returns>
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">publicboolCheckUserRoleByRule(stringusername,stringrole,stringrule)
<img align="top" alt="" id="Codehighlighter1_364_706_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_364_706_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" id="Codehighlighter1_466_473_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedSubBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_466_473_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedSubBlock.gif">IPrincipalprincipal=newGenericPrincipal(newGenericIdentity(username),newstring[]<img alt="" src="http://www.cnblogs.com/Images/dot.gif">{role});
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//创建一个默认的Authorization实例
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">IAuthorizationProviderautoprovider=AuthorizationFactory.GetAuthorizationProvider();
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//返回验证是否通过
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">returnautoprovider.Authorize(principal,rule);
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>

通过上面的方法可以很简单的实现对用户权限的鉴定，关于Security Application Block的简单应用就说到这里，下面我们来看一下如何实现自定义的authorization provider。
1、首先我们建立自己的Provider类，该类需继承AuthorizationProvider；
2、并且要加上[ConfigurationElementType(typeof(CustomAuthorizationProviderData))]的Attribute；
3、添加构造函数，参数为NameValueCollection类型；
4、覆盖基类中的Authorize方法，在其中添加自己的验证是否授权的逻辑
这样就完成了一个自定义的authorization provider。
完整的类定义如下：

<div style="border: 1px solid rgb(204, 204, 204); padding: 4px 5px 4px 4px; font-size: 13px; width: 98%; background-color: rgb(238, 238, 238);">
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingSystem;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingSystem.Collections.Generic;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingSystem.Text;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingMicrosoft.Practices.EnterpriseLibrary.Security;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingSystem.Collections.Specialized;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingSystem.Security.Principal;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingMicrosoft.Practices.EnterpriseLibrary.Common.Configuration;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">usingMicrosoft.Practices.EnterpriseLibrary.Security.Configuration;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/None.gif">namespaceEnterprise_Library_2
<img align="top" alt="" id="Codehighlighter1_358_767_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_358_767_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">[ConfigurationElementType(typeof(CustomAuthorizationProviderData))]
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">publicclassCustomProvider:AuthorizationProvider
<img align="top" alt="" id="Codehighlighter1_492_765_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedSubBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_492_765_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedSubBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">publicCustomProvider(NameValueCollectionconfigurationItems)
<img align="top" alt="" id="Codehighlighter1_572_595_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedSubBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_572_595_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedSubBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedSubBlockEnd.gif">}
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">publicoverrideboolAuthorize(IPrincipalprincipal,stringcontext)
<img align="top" alt="" id="Codehighlighter1_683_758_Open_Image" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedSubBlockStart.gif"><img align="top" alt="" id="Codehighlighter1_683_758_Closed_Image" style="display: none;" src="http://www.cnblogs.com/Images/OutliningIndicators/ContractedSubBlock.gif"><img alt="" src="http://www.cnblogs.com/Images/dot.gif">{
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">//TODO：在此处添加自己需要的验证授权的逻辑既可
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif">returntrue;
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedSubBlockEnd.gif">}
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/InBlock.gif"><img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedSubBlockEnd.gif">}
<img align="top" alt="" src="http://www.cnblogs.com/Images/OutliningIndicators/ExpandedBlockEnd.gif">}
</div>

  <script type="text/javascript">
function pageLoad()
{
 Sys.WebForms.PageRequestManager.getInstance().add_initializeRequest(handleInitializeRequest);
 //Sys.WebForms.PageRequestManager.getInstance().add_endRequest(handleEndRequest);
}

function handleInitializeRequest(sender, args)
{
 var prm = Sys.WebForms.PageRequestManager.getInstance();
 var eid = args.get_postBackElement().id;
 if (eid.indexOf("DeleteLink")>0)
 {
 args.get_postBackElement().innerHTML = "正在删除...";
 }
 else if (eid.indexOf("btnSubmit")>0)
 {
 document.getElementById("AjaxHolder_PostComment_ltSubmitMsg").innerHTML="正在提交...";
 document.getElementById("AjaxHolder_PostComment_btnSubmit").disabled = true;
 }
 else if(eid.indexOf("refreshList")>0)
 {
 document.getElementById("AjaxHolder_PostComment_refreshList").innerHTML="正在刷新...";
 }

}

function TempSave(ElementID)
{
try
{
CommentsPersistDiv.setAttribute("CommentContent",document.getElementById(ElementID).value);
CommentsPersistDiv.save("CommentXMLStore");
}
catch(ex)
{
}

}
function Restore(ElementID)
{
CommentsPersistDiv.load("CommentXMLStore");
document.getElementById(ElementID).value=CommentsPersistDiv.getAttribute("CommentContent");
}

</script>

分享到：