.net MVC 添加角色并添加用户并向用户添加角色+使视图的一部分仅对角色可见

.net MVC add roles and add users and add roles to users + make part of a view only visible for a role

我是 .net 的新手,必须为学校创建一个项目。我使用的是 MVC 5 模板,它具有标准登录,但现在我需要 2 个角色:学生和教师。我如何以及在哪里创建这些角色?然后我该怎么做才能让只有登录的人才能从这个导航

中看到最后一个项目
<div class="navbar-collapse collapse">
            <ul class="nav navbar-nav">
                <li>@Html.ActionLink("Home", "Index", "Home")</li>
                <li>@Html.ActionLink("Roles", "Index", "Roles")</li>
                <li>@Html.ActionLink("Evaluaties", "About", "Home")</li>
            </ul>
            @Html.Partial("_LoginPartial")
        </div>

此外,我希望一个角色看到与另一个角色不同的观点,我该怎么做?

您可以将角色保存在数据库中,在用户成功登录后,您可以将角色添加到身份验证cookie中。请看我的回答.

MVC5项目模板默认没有角色管理器, 所以我们首先创建我们的角色管理器 classes; (为了保持项目结构良好,最好添加下面提到的 classes):

1- 创建 ApplicationRole class(添加到 Models 文件夹下的 IdentityModels.cs)

public class ApplicationRole : IdentityRole
{
    public ApplicationRole() : base() { }

    public ApplicationRole(string name) : base(name) { }
}

2- 创建 ApplicationRoleManager class(将其放在 App_Start 文件夹下的 IdentityConfig.cs 中)

public class ApplicationRoleManager : RoleManager<ApplicationRole>, IDisposable
{
    public ApplicationRoleManager(RoleStore<ApplicationRole> store) : base(store) { }

    public static ApplicationRoleManager Create(
        IdentityFactoryOptions<ApplicationRoleManager> options,
        IOwinContext context)
    {
        return new ApplicationRoleManager(new RoleStore<ApplicationRole>(context.Get<ApplicationDbContext>()));
    }
}

3- 在应用程序启动时配置角色管理器;将以下行添加到 Startup.Auth.cs 文件中的 ConfigureAuth(IAppBuilder app) 方法:

app.CreatePerOwinContext<ApplicationRoleManager>(ApplicationRoleManager.Create);

4- 根据需要创建一个新控制器或使用现有控制器,并在控制器构造函数中定义 ApplicationuserManager 和 ApplicationRoleManager 的参数,然后从 owin 上下文中检索身份管理器:

    namespace UsersAndRoles.Controllers
{
using Microsoft.AspNet.Identity.Owin;
using System.Web;
using System.Web.Mvc;

    public class UsersAndRolesController : Controller
    {
        private ApplicationUserManager _userManager;
        private ApplicationRoleManager _roleManager;

        public UsersAndRolesController() { }

        public UsersAndRolesController(ApplicationUserManager userManager, ApplicationRoleManager roleManager)
        {
            UserManager = userManager;
            RoleManager = roleManager;
        }

        public ApplicationUserManager UserManager
        {
            get
            {
                return _userManager ?? HttpContext.GetOwinContext().GetUserManager<ApplicationUserManager>();
            }
            private set
            {
                _userManager = value;
            }
        }

        public ApplicationRoleManager RoleManager
        {
            get
            {
                return _roleManager ?? HttpContext.GetOwinContext().Get<ApplicationRoleManager>();
            }
            private set
            {
                _roleManager = value;
            }
        }

        // GET: UsersAndRoles
        public ActionResult Index()
        {
            return View();
        }
    }
}

设置现已完成,控制器已准备好创建用户和角色, 为了创建用户,只需创建一个 ApplicationUser 并使用 UserManager.Create 方法添加它,密码必须与 ApplicationUserManager class.

中定义的规则相匹配

5-调用UserManager.Create方法创建用户:

var user = new ApplicationUser
        {
            UserName = "Ziyad",
            Email = "email@domainname.com"
        };

        var password = "P@ssw0rd";
        UserManager.Create(user, password);

6- 使用 RoleManager 以类似方式创建角色:

var role = new ApplicationRole
        {
            Name = "Students"
        };

        RoleManager.Create(role);

7- 最后一部分是使用 UserManager 为用户分配角色:

UserManager.AddToRole("user_id", "role_name");

完整的控制器在这里:

    namespace UsersAndRoles.Controllers
{
    using Microsoft.AspNet.Identity;
    using Microsoft.AspNet.Identity.Owin;
    using System.Web;
    using System.Web.Mvc;
    using Models;
public class UsersAndRolesController : Controller
{
    private ApplicationUserManager _userManager;
    private ApplicationRoleManager _roleManager;

    public UsersAndRolesController() { }

    public UsersAndRolesController(ApplicationUserManager userManager, ApplicationRoleManager roleManager)
    {
        UserManager = userManager;
        RoleManager = roleManager;
    }

    public ApplicationUserManager UserManager
    {
        get
        {
            return _userManager ?? HttpContext.GetOwinContext().GetUserManager<ApplicationUserManager>();
        }
        private set
        {
            _userManager = value;
        }
    }

    public ApplicationRoleManager RoleManager
    {
        get
        {
            return _roleManager ?? HttpContext.GetOwinContext().Get<ApplicationRoleManager>();
        }
        private set
        {
            _roleManager = value;
        }
    }

    public string CreateUser()
    {
        var user = new ApplicationUser
        {
            UserName = "Ziyad",
            Email = "email@domainname.com"
        };

        var password = "P@ssw0rd";
        var result = UserManager.Create(user, password);

        if (result.Succeeded)
        {
            return "User created";
        }
        else
        {
            var msg = "Error, user not created";
            foreach (var err in result.Errors)
                msg += err + "<br />";

            return msg;
        }            
    }

    public string CreateRole()
    {
        var role = new ApplicationRole
        {
            Name = "Teachers"
        };

        var result = RoleManager.Create(role);

        if (result.Succeeded)
        {
            return "Role created";
        }
        else
        {
            var msg = "Error, role not created";
            foreach (var err in result.Errors)
                msg += err + "<br />";

            return msg;
        }
    }

    public string AddUserToRole()
    {
        var user = UserManager.FindByEmail("email@domainname.com");

        if (user != null)
        {
            var result = UserManager.AddToRole(user.Id, "Teachers");
            if (result.Succeeded)
            {
                return "User assigned to role";
            }
            else
            {
                var msg = "Error, user not assigned to role <br />";
                foreach (var err in result.Errors)
                    msg += err + "<br />";

                return msg;
            }
        }
        else
        {
            return "User not found!";
        }
    }
}

}

如果您想将某些 views/menus 限制为特定角色,请使用 User.IsInRole("role_name") 方法:

if (User.IsInRole("Teachers"))
        {
            // role specific options
        }

如果您只想允许特定角色访问操作方法,请使用授权属性:

[Authorize(Roles = "Teachers")]
public ActionResult ActionName()
{
    //teachers specific method
}

希望这对您有所帮助:)