www.pudn.com > UDS1.1_51aspx.rar > AssignRights.cs
using System;
using System.Data;
using System.Data.SqlClient;
namespace UDS.Components
{
enum AssignRightsAction
{
RULE_ADD =1,
RULE_DELETE =2,
ACTIVITY_ADD =3,
ACTIVITY_DELETE =4,
ACTIVITY_UPDATE =5
};
///
/// 对权限的操作
///
public class AssignRights
{
#region 添加权限
///
/// 添加权限
///
///
///
///
///
///
/// 删除权限
///
/// 权限记录号
public int DeleteRight(string RuleIDs)
{
int iReturn=1;
UDS.Components.Database mySQL = new UDS.Components.Database();
try
{
SqlParameter[] parameters = {
mySQL.MakeInParam("@Rule_IDS",SqlDbType.VarChar ,300,RuleIDs)
};
mySQL.RunProc("sp_DeleteAssignRule",parameters);
}
catch(Exception e)
{
Error.Log(e.ToString());
}
finally
{
//mySQL.Close();
//mySQL = null;
}
return iReturn;
}
#endregion
#region 获得权限列表
///
/// 获得权限列表
///
/// 用户名
/// 权限对象
/// 返回DataReader
/// 整形是否成功
public int GetProcessList(string UserName,long ClassID,out SqlDataReader dr)
{
int iReturn=1;
UDS.Components.Database mySQL = new UDS.Components.Database();
SqlParameter[] parameters = {
mySQL.MakeInParam("@UserName",SqlDbType.VarChar ,300,UserName),
mySQL.MakeInParam("@ClassID",SqlDbType.Int,4,ClassID)
};
dr = null;
try
{
mySQL.RunProc("sp_GetRightListToClass",parameters,out dr);
}
catch(Exception e)
{
Error.Log(e.ToString());
}
finally
{
//mySQL.Close();
//mySQL = null;
}
return iReturn;
}
#endregion
#region 获得权限列表
///
/// 获得权限列表
///
/// 用户名
/// 权限对象
/// 返回DataTable
/// 整形是否成功
public int GetProcessList(string UserName,long ClassID,out DataTable dt)
{
int iReturn=1;
SqlDataReader dr;
UDS.Components.Database mySQL = new UDS.Components.Database();
SqlParameter[] parameters = {
mySQL.MakeInParam("@UserName",SqlDbType.VarChar ,300,UserName),
mySQL.MakeInParam("@ClassID",SqlDbType.Int,4,ClassID)
};
dt = null;
try
{
mySQL.RunProc("sp_GetRightListToClass",parameters,out dr);
dt = UDS.Components.Tools.ConvertDataReaderToDataTable(dr);
}
catch(Exception e)
{
Error.Log(e.ToString());
}
finally
{
//mySQL.Close();
//mySQL = null;
}
return iReturn;
}
#endregion
#region 判断用户对对象是否有某个权限
///
/// 判断用户对对象是否有某个权限
///
/// 用户名
/// 被检查的对象
/// 权限ID
/// 是否有权限
public bool GetAccessPermission(string UserName,int classID,int actID)
{
int flag = 0;
// 定义数据库操作类及DataReader
Database data = new Database();
// 执行存储过程，并返回SqlDataReader对象
SqlParameter[] prams = {
data.MakeInParam("@Class_ID" , SqlDbType.Int, 20, classID),
data.MakeInParam("@UserName" , SqlDbType.NVarChar, 20, UserName),
data.MakeInParam("@Act_ID" , SqlDbType.Int, 20, actID),
// data.MakeInParam("@Inheit" , SqlDbType.Bit, 1, 1),
data.MakeOutParam("@ReturnValue",SqlDbType.Int,20)
};
try
{
data.RunProc("sp_GetAccessPermission",prams);
flag = Int32.Parse(prams[3].Value.ToString());
return (flag==1)?true:false;
}
catch(Exception ex)
{
Error.Log(ex.ToString());
throw new Exception("获取访问权出错",ex);
}
finally
{
data = null;
}
}
#endregion
}
}