XAF 如何控制自定义按钮的使用权限[转]

一个有问题的按钮权限控制：http://www.devexpress.com/Support/Center/p/Q261403.aspx(一个角色只能控制一个按钮权限)

隐藏显示按钮：http://www.devexpress.com/Support/Center/kb/p/K18055.aspx

Check Permission http://documentation.devexpress.com/#Xaf/CustomDocument2981

Action based Permission：http://www.devexpress.com/Support/Center/p/Q141870.aspx

1.新建一个角色 AuditWorkHourRevocate

2.在ViewController上加入一个SampleAction:btnAuditWorkHour

3.在要控制的目标DomainObject类加上如下修饰即可控制
[Appearance("btnAuditWorkHourDisabled", AppearanceItemType = "Action", TargetItems = "btnAuditWorkHour", Enabled = false, Criteria =         "Create_Uid.Roles[Name='AuditWorkHourRevocate'].Count<=0 ")]

缺点：角色名稱在程序中写死。

最好的方案用Expand中ActionState.

4.自己的实现方案(经简单测试通过)

在Main方法内加入：  ((SecurityComplex)application.Security).IsGrantedForNonExistentPermission = true;

web 程序: Global.asax.cs ((SecurityComplex)WebApplication.Instance.Security).IsGrantedForNonExistentPermission = true;

默认所以的Action是开启的，若想禁用请在角色权限加入拒绝即可。

using DevExpress.ExpressApp.Security;
using DevExpress.ExpressApp;

namespace MemberLevelSecurityDemo.Module
{
using System;
using System.Collections.Generic;
using System.Linq;
using DevExpress.Xpo;
using System.ComponentModel;
using System.Security;
using DevExpress.ExpressApp.Actions;
using DevExpress.Persistent.Base;
using System.Collections;
using DevExpress.ExpressApp.Model;

/// <summary>
/// 用角色管理Action
/// Tonyyang
/// Create On:2011-3-17
/// Modify On:2011-05-24
/// </summary>
[NonPersistent, DefaultProperty("DisplayName")]
public class ActionAccessPermission : PermissionBase
{

public ActionAccessPermission() { }
/// <summary>
/// 構造函數
/// </summary>
/// <param name="actionId">按鈕ID</param>
/// <param name="modifier">權限訪問類型</param>
public ActionAccessPermission(string actionId, ObjectAccessModifier modifier)
{
this.ActionId = actionId;
this.Modifier = modifier;
}

/// <summary>
/// 顯示名稱
/// </summary>
public string DisplayName { get { return this.ToString(); } }

//public ActionBase Action { get; set; }
/// <summary>
/// 按鈕訪問權限項目List集合
/// </summary>
private List<ActionAccessPermissionItem> items = new List<ActionAccessPermissionItem>();

private ActionAccessPermissionItem GetDesignModeItem()
{
if (items.Count > 1)
{
throw new InvalidOperationException();
}
if (items.Count == 0)
{
items.Add(new ActionAccessPermissionItem());
}
return items[0];
}
/// <summary>
/// 複製按鈕訪問權限項目
/// </summary>
/// <returns></returns>
private List<ActionAccessPermissionItem> CloneItems()
{
List<ActionAccessPermissionItem> clonedItems = new List<ActionAccessPermissionItem>();
foreach (ActionAccessPermissionItem item in items)
{
clonedItems.Add(new ActionAccessPermissionItem(item));
}
return clonedItems;
}
/// <summary>
/// 建立目前使用權限和指定之使用權限聯集的使用權限。
/// </summary>
/// <param name="target"></param>
/// <returns></returns>
public override System.Security.IPermission Union(System.Security.IPermission target)
{
ActionAccessPermission result = (ActionAccessPermission)Copy();
result.items.AddRange(((ActionAccessPermission)target).CloneItems());
return result;
}
/// <summary>
/// 判斷目前使用權限是否為指定之使用權限的子集。
/// </summary>
/// <param name="target"></param>
/// <returns></returns>
public override bool IsSubsetOf(System.Security.IPermission target)
{
if (base.IsSubsetOf(target))
{
foreach (ActionAccessPermissionItem targetItem in ((ActionAccessPermission)target).items)
{
if (targetItem.ActionId == ActionId)
{
return targetItem.Modifier == Modifier;
}
}
return true;
}
return false;
}
/// 對象訪問方式
/// </summary>
public ObjectAccessModifier Modifier
{
get { return GetDesignModeItem().Modifier; }
set { GetDesignModeItem().Modifier = value; }
}
/// <summary>
/// 使用 XML 編碼方式重建具有指定狀態的安全性物件。
/// </summary>
/// <returns></returns>
public override System.Security.SecurityElement ToXml()
{
SecurityElement result = base.ToXml();
SecurityElement itemElement = new SecurityElement("ActionAccessPermissionItem");

itemElement.AddAttribute("Modifier", Modifier.ToString());
itemElement.AddAttribute("ActionId", ActionId);
result.AddChild(itemElement);
return result;
}
/// <summary>
/// 建立安全性物件和其目前狀態的 XML 編碼方式。
/// </summary>
/// <param name="element"></param>
public override void FromXml(System.Security.SecurityElement element)
{
items.Clear();
if (element.Children != null)
{
if (element.Children.Count != 1)
{
throw new InvalidOperationException();
}
SecurityElement childElement = (SecurityElement)element.Children[0];

Modifier = (ObjectAccessModifier)Enum.Parse(typeof(ObjectAccessModifier), childElement.Attributes["Modifier"].ToString());
ActionId = childElement.Attributes["ActionId"].ToString();
}
}

public override string ToString()
{
return String.Format("{0} - {1}", ActionId, Modifier);
//return base.ToString();
}
/// <summary>
/// 建立並傳回目前使用權限的相同複本
/// </summary>
/// <returns></returns>
public override System.Security.IPermission Copy()
{
ActionAccessPermission result = new ActionAccessPermission();
result.items.AddRange(CloneItems());
return result;
}

/// <summary>
/// 按鈕ID
/// </summary>
[DataSourceProperty("Types")]
[Custom("PropertyEditorType", "MemberLevelSecurityDemo.Module.WinStringArrayComboPropertyEditor")]
public string ActionId
{
get { return GetDesignModeItem().ActionId; }
set { GetDesignModeItem().ActionId = value; }
}

[Browsable(false)]
public object Types
{
get { return GetActionIds(Action); }
}

public static ActionBase Action { get; set; }
/// <summary>
/// 獲取系統中所有ActionId
/// </summary>
/// <param name="action">ActionBase</param>
/// <returns>ActonIds</returns>
public string[] GetActionIds(ActionBase action)
{
if (action != null)
{
ArrayList result = new ArrayList();
foreach (IModelAction item in action.Model.Application.ActionDesign.Actions)
{
result.Add(item.Id);
}
return   result.ToArray(typeof(string)) as string[];
}
return null;
}
}
}

//////////
public class ActionAccessPermissionItem
{
public ActionAccessPermissionItem() { }
public ActionAccessPermissionItem(ActionAccessPermissionItem source)
{
this.ActionId = source.ActionId;
this.Modifier = source.Modifier;
}

public string ActionId { get; set; }
public ObjectAccessModifier Modifier
{ get; set; }
}
////
public  class ViewController1 : ViewController
{
public ViewController1()
{
//InitializeComponent();
//RegisterActions(components);
}
protected override void OnActivated()
{
foreach (Controller controller in Frame.Controllers)
{
foreach (ActionBase action in controller.Actions)
{
bool isAction = SecuritySystem.IsGranted(new ActionAccessPermission(action.Id, ObjectAccessModifier.Allow));
action.Active.SetItemValue("ActionState1", isAction);
if (ActionAccessPermission.Action == null)
ActionAccessPermission.Action = action;
}
}
}
}

出处：http://www.cnblogs.com/Tonyyang/