模块添加自定义标签鉴权 在Token启用的情况下。通过自定义标签定义的modname和Operate 判断用户是否有访问模块的权限

chenhaozhe

5 天以前 a985e6ba578b4ec28a25932f871c4df76ce092f2

 WebAPI/Controllers/XSGL/Xs_ExceptiveCheckRequestBillController.cs

@@ -8,10 +8,12 @@
using System.Data.SqlClient;
using System.Web.Http;
using WebAPI.Models;
using WebAPI.Utility;

namespace WebAPI.Controllers
{
    //特批申请单Controller
    [Permission(HModName = "Xs_ExceptiveCheckRequestBill")]
    public class Xs_ExceptiveCheckRequestBillController : ApiController
    {
        //获取系统参数
@@ -31,6 +33,7 @@
        /// </summary>
        [Route("Xs_ExceptiveCheckRequestBill/list")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Query")]
        public object getXs_ExceptiveCheckRequestBill(string sWhere, string user)
        {
            try
@@ -86,6 +89,7 @@
        #region 特批申请单保存 新增/编辑
        [Route("Xs_ExceptiveCheckRequestBill/SaveXs_ExceptiveCheckRequestBill")]
        [HttpPost]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Edit")]
        public object SaveXs_ExceptiveCheckRequestBill([FromBody] JObject msg)
        {
            var _value = msg["msg"].ToString();
@@ -315,6 +319,7 @@
        /// </summary>
        [Route("Xs_ExceptiveCheckRequestBill/delete")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Drop")]
        public object deleteXs_ExceptiveCheckRequestBill(string HInterID, string user)
        {
            try
@@ -401,6 +406,7 @@
        /// <returns></returns>
        [Route("Xs_ExceptiveCheckRequestBill/AuditXs_ExceptiveCheckRequestBill")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Check")]
        public object AuditXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
        {
            string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Check";
@@ -758,6 +764,7 @@
        /// <returns></returns>
        [Route("Xs_ExceptiveCheckRequestBill/CloseXs_ExceptiveCheckRequestBill")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Close")]
        public object CloseXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
        {
            string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Close";
@@ -903,6 +910,7 @@
        /// <returns></returns>
        [Route("Xs_ExceptiveCheckRequestBill/DeleteXs_ExceptiveCheckRequestBill")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Delete")]
        public object DeleteXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
        {
            string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Delete";