基于角色的身份验证3

数据库表

 

CREATE 
DATABASE web

CREATE TABLE users
(
    username nvarchar(64) CONSTRAINT users_PK PRIMARY KEY,
    password nvarchar(128),
    roles nvarchar(64)
)

CREATE INDEX credentials ON users
(
    username,
    password
)

内容
 格式
 

username  |password      |roles
"hstewart"|"codeproject" |"Administrator,User"
"joe"     |"schmoe"      |"User"

web.config 的设置  
 

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
    
  <system.web>

  
    <compilation 
         defaultLanguage="c#"
         debug="true"
    />

   
    <customErrors 
    mode="RemoteOnly" 
    /> 

   
 <authentication mode="Forms">
            <forms name="MYWEBAPP.ASPXAUTH"
                loginUrl="login.aspx"
                protection="All"
                path="/"/>
        </authentication>
        <authorization>
              <allow users="*"/>
        </authorization>

    <trace
        enabled="false"
        requestLimit="10"
        pageOutput="false"
        traceMode="SortByTime"
        localOnly="true"
    />

    
    <sessionState 
            mode="InProc"
            stateConnectionString="tcpip=127.0.0.1:42424"
            sqlConnectionString="data source=127.0.0.1;Trusted_Connection=yes"
            cookieless="false" 
            timeout="20" 
    />

    <globalization 
            requestEncoding="utf-8" 
            responseEncoding="utf-8" 
   />
   
 </system.web>
<location path="administrators">
        <system.web>
            <authorization>
                <!-- Order and case are important below -->
                <allow roles="Administrator"/>
                <deny users="*"/>
            </authorization>
        </system.web>
    </location>
    <location path="users">
        <system.web>
            <authorization>
                <!-- Order and case are important below -->
                <allow roles="User"/>
                <deny users="*"/>
            </authorization>
        </system.web>
    </location>
</configuration>

 

    

Global.asax

    protected void Application_AuthenticateRequest(Object sender, EventArgs e)
        }

上边的难证代码和下边是一样的,有兴趣可以看一下。。。。 

 

 System.Web .HttpApplication  app=((HttpApplication)sender);
           System.Web.HttpContext  ctx=app.Context;
            if (ctx.Request .IsAuthenticated)

   



     login.aspx 
  

private void Button1_Click(object sender, System.EventArgs e)
        }

在根目录下建 
administrators  目录
users          目录

 两个目录下分别建调用页面 

 调用页面内容
 

  private void Page_Load(object sender, System.EventArgs e)

   

  
  转自

 http://www.codeproject.com/aspnet/formsroleauth.asp