权限控制

var ress = new Res[]
   {
   ……
   new Res {Name="地区列表",Value="Sys_Area_List"},
   new Res {Name="地区详情",Value="Sys_Area_Get"},
   new Res {Name="地区添加",Value="Sys_Area_Add"},
   new Res {Name="地区修改",Value="Sys_Area_Update"},
   new Res {Name="地区删除",Value="Sys_Area_Delete"},
   new Res {Name="地区批量删除",Value="Sys_Area_BatchDelete"},
   ……
   };
context.Ress.AddRange(ress);

注意：
①Name资源描述
②Value资源值。组成:模块名称_实体类名称_action方法。权限控制会根据角色拥有的权限，
权限拥有的资源，判断某个用户是否拥有访问某个资源的能力。资源值不区分大小写!!!

//添加权限
Authority authority = new Authority() { Name = "图片管理", Code = "image_manger" };
authorityBll.Add(authority);
//赋予权限资源
Res res = resBll.SelectOne(o => o.Id == 3);
AuthorityRes authorityRes = new AuthorityRes() { Authority = authority,Res= res };
authorityResBll.Add(authorityRes);

//添加角色
Role role = new Role() { Name = "管理员", Code = "manger" };
roleBll.Add(role);
//查询权限
Authority authority = authorityBll.SelectOne(o => o.Id == 2);
//添加角色权限
RoleAuthority roleAuthority = new RoleAuthority() {Role=role,Authority=authority };
roleAuthorityBll.Add(roleAuthority);

 var roles = roleBll.SelectAll();
 foreach (var r in roles)
{
//角色对应资源序号索引
List<int> ressindex = new List<int>();
 //角色对应权限
var roleAuthorites = roleAuthorityBll.SelectAll(o => o.RoleId == r.Id);
foreach (var a in roleAuthorites)
   {
   
    //权限对应资源
    var authorityRess = authorityResBll.SelectAll(o => o.AuthorityId == a.AuthorityId);
    foreach (var _authorityRes in authorityRess)
         {
            int idx = roleRess.GetResIndex(_authorityRes.Res.Value);
            if (idx != -1)//资源存在添加到角色资源列表
            {
                ressindex.Add(idx);
            }
         }
    }
     //保存对应角色和资源下标索引
      roleRess.AddRoleRess(r.Code, ressindex);
}
cache.Set(RoleResMap.CACHE_KEY, roleRess);

[Route("api/[controller]/[action]")]  
[ApiController]  
[Authority(Module ="Sys")] //加在控制器，控制器内所有方法需登录且具有访问对应资源的权限        
public class AreaController : MyBaseController  
{
    IAreaBll bll{geet;set;};  
    [HttpGet]  
    public Result List([FromQuery] Dictionary<string, string> where)  
    {  
        return Result.Success("succeed").SetData(bll.Query(where));  
    }      
}  

[Route("api/[controller]/[action]")]  
[ApiController]  	  	 
public class AreaController : MyBaseController  
{  
	IAreaBll bll{geet;set;};  
	[HttpGet]    
	[Authority(Module ="Sys")] //加在操作方法，某个方法需登录且具有访问对应资源的权限              
	public Result List([FromQuery] Dictionary<string, string> where)  
	{   
		return Result.Success("succeed").SetData(bll.Query(where));  
	}      
}  

注意：
①Module模块名称与添加资源时的模块名称保持一致，比如Value="Sys_Area_List"，因为Authority过滤器当用户在访问
某个方法资源时，会自动获取当前控制器名和方法名称，通过"模块名称_控制器名称_方法名称"构成完整的资源值。如果添加资源的时候，资源值
没有模块名称，Module不需要赋值	
②当角色为超级管理员admin的时候，拥有所有权限，即不需要验证权限

[HttpGet("getuserinfo")]
[Authority(Access = AccessType.Login)]
public Result<User> GetUserinfo()
{
    User obj = null;
    obj = this.userBll.SelectOne(MyUser.Id);
    if (obj != null)
    {
        obj.Pswd = "";
        return Result<User>.Success("获取成功").SetData(obj);
    }
    return Result<User>.Error("获取失败").SetData(new User() { });
} 

[Route("api/[controller]/[action]")]  
[ApiController]  
[Authorize()] //加在控制器，控制器内所有方法需登录访问        
public class AreaController : MyBaseController  
{
    IAreaBll bll{geet;set;};  
    [HttpGet]  
    public Result List([FromQuery] Dictionary<string, string> where)  
    {  
        return Result.Success("succeed").SetData(bll.Query(where));  
    }      
}  

[Route("api/[controller]/[action]")]  
	[ApiController]  	  	 
	public class AreaController : MyBaseController  
	{  
		IAreaBll bll{geet;set;};  
		[HttpGet]    
		[Authorize()] //加在操作方法，某个方法需登录访问            
		public Result List([FromQuery] Dictionary<string, string> where)  
		{   
		    return Result.Success("succeed").SetData(bll.Query(where));  
		 }      
	}  

     //加在控制器，控制器内所有方法需登录访问   
    [Route("api/[controller]/[action]")]   
    [ApiController]   
    [Authorize("admin")]    //策略为admin才能访问   
    public class AreaController : MyBaseController   
    {   
        IAreaBll bll{geet;set;};    
        [HttpGet]   
        public Result List([FromQuery] Dictionary<string, string> where)   
        {   
            return Result.Success("succeed").SetData(bll.Query(where));   
        }           
    }   

      services.AddAuthorization(options =>        
      {      
		//AddPolicy("admin" 自定义策略名称         
		//policy => policy.RequireRole("admin")策略要求角色，一个策略可以有多个角色    
        options.AddPolicy("admin", policy => policy.RequireRole("admin").Build());    
        options.AddPolicy("teacher", policy => policy.RequireRole("teacher","admin").Build());    
        options.AddPolicy("student", policy => policy.RequireRole("student").Build());    
      });    
      #endregion 

    public class DefaultController : MyBaseController     
      {              
        [HttpPost("login")]             
        public Result Login(Userinfo o)     
        //public Result Login([FromForm]string username, [FromForm]string password,[FromForm]string type="student")            
        {      
            ……          
            if (obj != null)        
            {       
                type = o.Type;       
                var t = new Token() { Uid = obj.Id, Uname = obj.Username, Role = obj.Role, Type = type, TokenType = TokenType.App, Project = project,ClasssId= classid,SchoolId = schoolid };           
                return Result.Success("登录成功")          
                    .SetData(new Userinfo() { Id = obj.Id, Username = obj.Username, Avatar = obj.Photo, Role = obj.Role, Type = o.Type, Realname = obj.Realname, Tel = obj.Tel, Email = obj.Email, Birthday = obj.Birthday, Token = JwtHelper.IssueJWT(t, this.jwtConfig) });                            
            }      
            return Result.Error("登录失败,用户名密码错误").SetData(new Userinfo() { Token = "" });     
        }    
	  }