asp.net根据登陆名分配权限

using System; using System.Data; using System.Configuration; using System.Collections; using System.Text; using System.Collections.Generic; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; using i_salesDAL; using i_salesModels; using i_salesBLL; using MySql.Data.MySqlClient; public partial class login : System.Web.UI.Page { Ss_users myUser;//实例化一个用户对象 protected void Page_Load(object sender, EventArgs e) { if (!Page.IsPostBack) { } } protected void btnlogin_Click(object sender, EventArgs e) { string name = this.txtname.Text; string pwd = this.txtpwd.Text; if (this.txtname.Text.Trim().Length == 0 || this.txtpwd.Text.Trim().Length == 0) { //如果用户名或者密码没有输入，提示用户 Page.RegisterStartupScript("", "<mce:script type="text/javascript"><!-- alert('用户名或密码没有输入！') // --></mce:script>"); } //如果用户名或者密码输入 else { //如果用户名存在 if (Ss_usersManager.LoginIDExists(name)) { //判断密码是否正确 if (Ss_usersManager.GetKey(name, pwd, out myUser)) { Session["CurrentUser"] = myUser;//存入session int id =Ss_usersManager.GetUserInfoByLoginId(name).ID;//用户id //权限分配 if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 1)//系统管理员角色 { Response.Redirect("admin/adminlinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 2)//客户资料专员角色 { Response.Redirect("kf/kflinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 3)//电话经理 { Response.Redirect("dhjl/dhjllinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 4)//数据专员角色 { Response.Redirect("sj/sjlinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 5)//电话专员角色 { Response.Redirect("dhzy/dhzylinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 6)//销售部门经理角色 { Response.Redirect("xsjl/xsjllinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 7)//销售专员角色 { Response.Redirect("xszy/xszylinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 8)//总经理角色 { Response.Redirect("CEO/ceolinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 9)//销售总监角色 { Response.Redirect("xszj/xszjlinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 10)//中型客户及出口贸易部门经理角色 { Response.Redirect("zxxsjl/zxxsjllinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 11)//中型客户及出口贸易销售专员角色 { Response.Redirect("zxxsjl/zxxsjllinkto.html"); } if (Ss_user_roleManager.GetRole_IdByUser_ID(id) == 12)//合同管理员角色 { Response.Redirect("ht/htlinkto.html"); } } else { Page.RegisterStartupScript("", "<mce:script type="text/javascript"><!-- alert('密码错误！') // --></mce:script>"); } } else { Page.RegisterStartupScript("", "<mce:script type="text/javascript"><!-- alert('用户名不存在！') // --></mce:script>"); } } } }

 

Ss_user_roleService.cs

 

using System; using System.Collections.Generic; using System.Text; using System.Data; using MySql.Data.MySqlClient; using i_salesModels; namespace i_salesDAL { public class Ss_user_roleService { //根据用户user_id删除用户权限 public static void delSs_user_roleByUser_ID(int uid) { string sql = "delete from ss_user_role where USER_ID=@uid"; MySqlParameter[] para = new MySqlParameter[] { new MySqlParameter("@uid",uid) }; DBHelper.ExecuteCommand(sql,para); } //根据用户user_id,取得对应的权限role_id public static int GetRole_IdByUser_ID(int uid) { int rid; string sql = "select ROLE_ID from ss_user_role where USER_ID=?id"; using (MySqlDataReader reader = DBHelper.GetReader(sql, new MySqlParameter("?id", uid))) { if (reader.Read()) { rid = (int)reader["ROLE_ID"]; reader.Close(); return rid; } else { reader.Close(); return 0; } } } } }

 

Ss_usersService.cs

using System; using System.Collections.Generic; using System.Text; using System.Data; using MySql.Data.MySqlClient; using i_salesModels; namespace i_salesDAL { public class Ss_usersService { //根据传递的id,返回对应的unit_id public static int GetUnit_IDById(int id) { int uid; string sql ="select UNIT_ID from ss_users where ID=?id"; using(MySqlDataReader reader = DBHelper.GetReader(sql,new MySqlParameter("?id",id))) { if (reader.Read()) { uid = (int)reader["UNIT_ID"]; reader.Close(); return uid; } else { reader.Close(); return 0; } } } //根据传递的id,返回对应的unit_id public static String GetNameById(int id) { string name=""; string sql = "select NAME from ss_users where ID=?id"; using (MySqlDataReader reader = DBHelper.GetReader(sql, new MySqlParameter("?id", id))) { if (reader.Read()) { name = (string)reader["NAME"]; reader.Close(); return name; } else { reader.Close(); return "空"; } } } //根据人员编号得到人员信息 public static Ss_users GetUserInfoByPerId(int id) { string sql = "select * from ss_users where ID=?id"; using (MySqlDataReader reader = DBHelper.GetReader(sql, new MySqlParameter("?id", id))) { if (reader.Read()) { Ss_users user = new Ss_users(); user.LOGINID = (string)reader["LOGINID"]; user.PASSWD = (string)reader["PASSWD"]; user.NAME=(string)reader["NAME"]; user.UNIT_ID = (int)reader["UNIT_ID"]; user.STATUS = (int)reader["STATUS"]; return user; } else { reader.Close(); return null; } } } //根据登录名得到人员信息 public static Ss_users GetUserInfoByLoginId(string loginid) { string sql = "select * from ss_users where LOGINID=?id"; using (MySqlDataReader reader = DBHelper.GetReader(sql, new MySqlParameter("?id",loginid))) { if (reader.Read()) { Ss_users user = new Ss_users(); user.ID=(int)reader["ID"]; user.LOGINID = (string)reader["LOGINID"]; user.PASSWD = (string)reader["PASSWD"]; user.NAME = (string)reader["NAME"]; user.UNIT_ID = (int)reader["UNIT_ID"]; user.STATUS = (int)reader["STATUS"]; return user; } else { reader.Close(); return null; } } } } }

 

Ss_usersManager.cs

using System; using System.Collections.Generic; using System.Text; using System.Data; using i_salesDAL; using i_salesModels; namespace i_salesBLL { public class Ss_usersManager { //根据传递的id,返回对应的unit_id public static int GetUnit_IDById(int id) { return Ss_usersService.GetUnit_IDById(id); } //根据人员编号得到人员信息 public static Ss_users GetUserInfoByPerId(int id) { return Ss_usersService.GetUserInfoByPerId(id); } //根据传递的id,返回对应的unit_id public static String GetNameById(int id) { return Ss_usersService.GetNameById(id); } //根据登录名得到人员信息 public static Ss_users GetUserInfoByLoginId(string loginid) { return Ss_usersService.GetUserInfoByLoginId(loginid); } //用户登陆，对用户名判断是否存在 public static bool LoginIDExists(string loginID) { if (Ss_usersService.GetUserInfoByLoginId(loginID) == null) { return false; } else { return true; } } //判断用户密码是否正确 public static bool GetKey(string loginID, string pwd, out Ss_users validMyUser) { Ss_users myUser = Ss_usersService.GetUserInfoByLoginId(loginID);//判断用户名是否存在 if (myUser == null) { validMyUser = null; return false; } if (myUser.PASSWD==pwd) { validMyUser = myUser; return true; } else { //密码 error validMyUser = null; return false; } } } }