ASP.NET Identity “角色-許可權”管理 4

標籤：

1.1.       User-Role分析

想必大家已經注意到了Microsoft.AspNet.Identity.EntityFramework是對Microsoft.AspNet.Identity.Core的EF實現，微軟是如何處理IdentityUser與IdentityRole的關係？因兩者為多對多關係，會在關係型資料庫增加一張關聯表，故增加IdentityUserRole，並在IdentityUser與IdentityRole中添加IdentityUserRole列表，代碼如下所示。

public class IdentityUserRole<TKey> {     public virtual TKey RoleId { get; set; }             public virtual TKey UserId { get; set; } }

IdentityUser

public class IdentityUser<TKey, TLogin, TRole, TClaim> : IUser<TKey> where TLogin: IdentityUserLogin<TKey> where TRole: IdentityUserRole<TKey> where TClaim: IdentityUserClaim<TKey> {     public IdentityUser()     {         this.Roles = new List<TRole>();     }     public ICollection<TRole> Roles { virtual get; private set; }     其它代碼省略…. }

IdentityRole

public class IdentityRole<TKey, TUserRole> : IRole<TKey> where TUserRole: IdentityUserRole<TKey> {     public IdentityRole()     {         this.Users = new List<TUserRole>();     }             public TKey Id { get; set; }             public string Name { get; set; }             public ICollection<TUserRole> Users { virtual get; private set; } }

EF分別配置IdentityUser、IdentityRole與IdentityUserRole的1對多關係。

public class IdentityDbContext: DbContext {     public IdentityDbContext() : this("DefaultConnection")     {     }             protected override void OnModelCreating(DbModelBuilder modelBuilder)     {         if (modelBuilder == null)         {             throw new ArgumentNullException("modelBuilder");         }         EntityTypeConfiguration<TUser> configuration = modelBuilder.Entity<TUser>().ToTable("AspNetUsers");         configuration.HasMany<TUserRole>(u => u.Roles).WithRequired().HasForeignKey<TKey>(ur => ur.UserId);         IndexAttribute indexAttribute = new IndexAttribute("UserNameIndex") {             IsUnique = true         };         configuration.Property((Expression<Func<TUser, string>>) (u => u.UserName)).IsRequired().HasMaxLength(0x100).HasColumnAnnotation("Index", new IndexAnnotation(indexAttribute));         configuration.Property((Expression<Func<TUser, string>>) (u => u.Email)).HasMaxLength(0x100);         modelBuilder.Entity<TUserRole>().HasKey(r => new { UserId = r.UserId, RoleId = r.RoleId }).ToTable("AspNetUserRoles");         EntityTypeConfiguration<TRole> configuration2 = modelBuilder.Entity<TRole>().ToTable("AspNetRoles");         IndexAttribute attribute2 = new IndexAttribute("RoleNameIndex") {             IsUnique = true         };         configuration2.Property((Expression<Func<TRole, string>>) (r => r.Name)).IsRequired().HasMaxLength(0x100).HasColumnAnnotation("Index", new IndexAnnotation(attribute2));         configuration2.HasMany<TUserRole>(r => r.Users).WithRequired().HasForeignKey<TKey>(ur => ur.RoleId);     }             public virtual IDbSet<TRole> Roles { get; set; }             public virtual IDbSet<TUser> Users { get; set; } }

模仿上述設計，實現Role-Permission關係。

ASP.NET Identity “角色-許可權”管理 4