ASP.NET&Spring.NET&NHibernate最佳实践(二十四)——第4章权限子系统（17）

修改Users.aspx

< asp:Content  ID ="MiddleColumnContent"  ContentPlaceHolderID ="MiddleColumnZone"  runat ="server" >
     < asp:Panel  ID ="Panel1"  runat ="server"  GroupingText ="用户列表" >
         < br  />
         < asp:GridView  ID ="GridView1"  runat ="server"  DataSourceID ="ObjectDataSource1"  DataKeyNames ="UserName"
            AutoGenerateColumns ="False"  Width ="100%"  OnRowCommand ="GridView1_RowCommand" >
             < Columns >
                 < asp:BoundField  HeaderText ="登录名"  DataField ="UserName"  ReadOnly ="true"   />
                 < asp:HyperLinkField  HeaderText ="电子邮件地址"  DataTextField ="Email"  DataNavigateUrlFormatString ="mailto:{0}"
                    DataNavigateUrlFields ="Email"   />
                 < asp:BoundField  HeaderText ="创建时间"  DataField ="CreationDate"  DataFormatString ="{0:MM/dd/yy h:mm tt}"
                    ReadOnly ="true"   />
                 < asp:BoundField  HeaderText ="活动时间"  DataField ="LastActivityDate"  DataFormatString ="{0:MM/dd/yy h:mm tt}"
                    ReadOnly ="true"   />
                 < asp:CheckBoxField  HeaderText ="审核"  DataField ="IsApproved"  HeaderStyle-HorizontalAlign ="Center"
                    ItemStyle-HorizontalAlign ="Center"   />
                 < asp:TemplateField >
                     < ItemTemplate >
                         < div  style ="width: 100%; text-align: right;" >
                             < asp:LinkButton  ID ="btnEdit"  CommandName ="Edit"  runat ="server" > 编辑 </ asp:LinkButton >
                             < asp:LinkButton  ID ="btnDelete"  CommandName ="Delete"  runat ="server"  OnClientClick ="return confirm('您真的要删除吗?')" > 删除 </ asp:LinkButton >
                         </ div >
                     </ ItemTemplate >
                     < EditItemTemplate >
                         < div  style ="width: 100%; text-align: right;" >
                             < asp:Button  ID ="btnUpdate"  runat ="server"  CommandName ="UpdateUser"  CommandArgument ="<%# Container.DataItemIndex %>"
                                Text ="更新"   />
                             < asp:Button  ID ="btnCancel"  runat ="server"  CommandName ="Cancel"  Text ="取消"   />
                         </ div >
                     </ EditItemTemplate >
                 </ asp:TemplateField >
             </ Columns >
         </ asp:GridView >
     </ asp:Panel >
     < hr  />
     < asp:Panel  ID ="Panel2"  runat ="server"  GroupingText ="新增部用户" >
         < br  />
         < asp:CreateUserWizard  ID ="CreateUserWizard1"  runat ="server"  ContinueDestinationPageUrl ="~/Users.aspx"
            DisableCreatedUser ="True"  EmailRegularExpression =""  EmailRegularExpressionErrorMessage ="" >
         </ asp:CreateUserWizard >
     </ asp:Panel >
     < asp:ObjectDataSource  ID ="ObjectDataSource1"  runat ="server"  TypeName ="System.Web.Security.Membership"
        SelectMethod ="GetAllUsers"  DeleteMethod ="DeleteUser" ></ asp:ObjectDataSource >
</ asp:Content >

修改Users.aspx..cs

using  System;
using  System.Data;
using  System.Configuration;
using  System.Collections;
using  System.Web;
using  System.Web.Security;
using  System.Web.UI;
using  System.Web.UI.WebControls;
using  System.Web.UI.WebControls.WebParts;
using  System.Web.UI.HtmlControls;

public   partial   class  Users : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }

    protected void GridView1_RowCommand(object sender, GridViewCommandEventArgs e)
    {
        if (e.CommandName == "UpdateUser")
        {
            MembershipUser user = Membership.GetUser((string)GridView1.DataKeys[Convert.ToInt32(e.CommandArgument)].Value);

            if (((CheckBox)GridView1.Rows[Convert.ToInt32(e.CommandArgument)].Cells[4].Controls[0]).Checked)
            {
                user.IsApproved = true;
            }
            else
            {
                user.IsApproved = false;
            }

            Membership.UpdateUser(user);

            GridView1.EditIndex = -1;

            return;
        }

    }     
}

修改UserRole.aspx

< asp:Content  ID ="MiddleColumnContent"  ContentPlaceHolderID ="MiddleColumnZone"  runat ="server" >
     < asp:Panel  ID ="Panel1"  runat ="server"  GroupingText ="权限设置" >
         < br  />
        选择用户 < br  />
         < asp:DropDownList  ID ="lstUsers"  runat ="server"  AutoPostBack ="true"  OnSelectedIndexChanged ="lstUsers_SelectedIndexChanged" >
         </ asp:DropDownList >
         < br  />
        所有角色 < br  />
         < asp:CheckBoxList  ID ="chkRoles"  runat ="server" >
         </ asp:CheckBoxList >
         < p >
             < asp:Button  ID ="btnUpdate"  runat ="server"  Text ="更新"  OnClick ="btnUpdate_Click"   />
         </ p >
     </ asp:Panel >
</ asp:Content >

修改UserRole.aspx.cs

using  System;
using  System.Data;
using  System.Configuration;
using  System.Collections;
using  System.Web;
using  System.Web.Security;
using  System.Web.UI;
using  System.Web.UI.WebControls;
using  System.Web.UI.WebControls.WebParts;
using  System.Web.UI.HtmlControls;

public   partial   class  UserRole : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            BindUsers();
            BindRoles();
        }
    }

    private void BindUsers()
    {
        System.Web.Security.MembershipUserCollection users = System.Web.Security.Membership.GetAllUsers();

        lstUsers.DataSource = users;
        lstUsers.DataTextField = "UserName";
        lstUsers.DataValueField = "UserName";
        lstUsers.DataBind();
    }

    private void BindRoles()
    {
        
        chkRoles.Items.Clear();

        string[] roles = System.Web.Security.Roles.GetAllRoles();

        string[] userRoles = System.Web.Security.Roles.GetRolesForUser(lstUsers.SelectedValue);

        foreach (string role in roles)
        {
            ListItem item = new ListItem();
            item.Text = role;
            item.Value = role;

            if (Array.IndexOf(userRoles, role) > -1)
            {
                item.Selected = true;
            }

            chkRoles.Items.Add(item);
        }
    
    }

    protected void lstUsers_SelectedIndexChanged(object sender, EventArgs e)
    {
        BindRoles();
    }

    protected void btnUpdate_Click(object sender, EventArgs e)
    {

        foreach (ListItem item in chkRoles.Items)
        {
            if (item.Selected)
            {
                System.Web.Security.Roles.AddUserToRole(lstUsers.SelectedValue, item.Value);
            }
            else
            {
                System.Web.Security.Roles.RemoveUserFromRole(lstUsers.SelectedValue, item.Value);
            }
        }

    }
}