step 1:
-
C# code
-
<authentication mode="forms"><forms name=".ASPXAUTH " loginUrl="/login.aspx" timeout="30" path= "/"></forms></authentication>
step 2:
需要角色控制的目錄下建立web.config,如以下配置
-
C# code
-
<authorization><allow users="comma-separated list of users"roles="comma-separated list of roles"verbs="comma-separated list of verbs" /><deny users="comma-separated list of users"roles="comma-separated list of roles"verbs="comma-separated list of verbs" /></authorization>
step 3:
登入代碼,獲得船票
-
C# code
-
FormsAuthenticationTicket Ticket = new FormsAuthenticationTicket (1,user,DateTime.Now,
-
DateTime.Now.AddMinutes(30), false,userRoles,"/") ; //建立身分識別驗證票對象 string HashTicket = FormsAuthentication.Encrypt (Ticket) ; //加密序列化驗證票為字串 HttpCookie UserCookie = new HttpCookie(FormsAuthentication.FormsCookieName, HashTicket) ;//產生Cookie Context.Response.Cookies.Add (UserCookie) ; //Cookie
-
step 4:(手工建立角色)
在global.asax 中
-
C# code
-
protected void Application_AuthorizeRequest(object sender, System.EventArgs e){HttpApplication App = (HttpApplication) sender;HttpContext Ctx = App.Context ; //擷取本次Http請求相關的HttpContext對象 if (Ctx.Request.IsAuthenticated == true) //驗證過的使用者才進行role的處理 {FormsIdentity Id = (FormsIdentity)Ctx.User.Identity ;FormsAuthenticationTicket Ticket = Id.Ticket ; //取得身分識別驗證票 string[] Roles = Ticket.UserData.Split (',') ; //將身分識別驗證票中的role資料轉成字串數組 Ctx.User = new GenericPrincipal (Id, Roles) ; //將原有的Identity加上角色資訊建立一個GenericPrincipal表示目前使用者,這樣目前使用者就擁有了role資訊 }}