ASP.NET入門教程 11.3 配置頁面級別的授權[4]

    （）添加下面的代碼以完成Admin部分的Webconfig文件並且注意其中一個權限並不是完全正確

 

 <location path=Adminaspx>

    <systemweb>

      <authorization>

        <allow roles=ReporterAdministratorOwnerManager />

      </authorization>

    </systemweb>

  </location>

  <location path=EditNewsaspx>

    <systemweb>

      <authorization>

        <allow roles=ReporterAdministratorOwnerManager />

      </authorization>

    </systemweb>

  </location>

  <location path=MatchScoreaspx>

              <systemweb>

                     <authorization>

                            <allow roles=Reporter />

                     </authorization>

              </systemweb>

       </location>

       <location path=MatchReportaspx>

              <systemweb>

                     <authorization>

                            <allow roles=Reporter />

                     </authorization>

              </systemweb>

       </location>

       <location path=EditSquadaspx>

              <systemweb>

                     <authorization>

                            <allow roles=Owner />

                     </authorization>

              </systemweb>

       </location>

       <location path=ScheduleMatchaspx>

              <systemweb>

                     <authorization>

                            <allow roles=OwnerManager />

                     </authorization>

              </systemweb>

       </location>

  <location path=UpdateProductsaspx>

    <systemweb>

      <authorization>

        <allow roles=Administrator />

      </authorization>

    </systemweb>

  </location>

  <location path=UserAdminaspx>

    <systemweb>

      <authorization>

        <allow roles=Administrator />

      </authorization>

    </systemweb>

  </location>

  <location path=CreateUseraspx>

    <systemweb>

      <authorization>

        <allow roles=Administrator />

      </authorization>

    </systemweb>

  </location>

</configuration>

    在EditSquadaspx頁面的權限中注意Reporter角色只被授權訪問websitemap頁面沒有被修改因此看看您是否可以猜測出在運行該頁面時將顯示什麼！再次嘗試再次作為ChrisH登錄並且查看發生了什麼

    下面是最終的結果不僅可以查看Edit Squad鏈接還可以實際地轉到Edit Squad頁面並修改這個體育隊的成員！最後進行一次改動以修正這個問題畢竟記者不應該能夠修改隊伍的成員關系

[]  []  []  []  []  []  

From:http://tw.wingwit.com/Article/program/net/201311/15798.html