/// <summary>

     /// 网站用户实体对象

     /// </summary>

     public class DDTPrincipal : IPrincipal

     {

         public int? OrgCode { get; set; }

         public string RoleName { get; set; }

         public string OrgName { get; set; }

         private IIdentity _identity;

         public DDTPrincipal(string orgcode, string roleName, string orgName, IIdentity identity)

         {

             int _orgCode;

             int.TryParse(orgcode, out _orgCode);

             OrgCode =  _orgCode;

             OrgName = orgName;

             RoleName = roleName;

             _identity = identity;

         }

         public IIdentity Identity

         {

             get { return _identity; }

         }

         public bool IsInRole(string role)

         {

             return RoleName.IndexOf(role)>=;

         }

     }

         [HttpPost]

         [AllowAnonymous]

         [ValidateAntiForgeryToken]

         public ActionResult LoginView(LoginModel model, string returnUrl)

         {

             if (ModelState.IsValid)

             {

                 Account a = DataRepository.AccountProvider.GetByAccountName(model.UserName);

                 DataRepository.AccountProvider.DeepLoad(a,false, DeepLoadType.IncludeChildren,typeof(Org));

                 TList<AccountRole> arList = DataRepository.AccountRoleProvider.GetByAccountName(a.AccountName);

                 DataRepository.AccountRoleProvider.DeepLoad(arList, false, DeepLoadType.IncludeChildren, typeof(Role));

                 string roleName=string.Empty;

                 if (arList.Count > )

                 {

                     foreach (var item in arList)

                     {

                         roleName += item.RoleNoSource.RoleName + ",";

                     }

                 }

                 else { roleName = "无"; }

                 if (a!=null&&a.AccountPassword==model.Password)

                 {

                    // return RedirectToLocal(returnUrl);

                     FormsAuthentication.RedirectFromLoginPage(a.UserName, false);

                     FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(, a.UserName, DateTime.Now,

                         DateTime.Now.AddMinutes(), false,

                         string.Format("{0}|{1}|{2}", a.OrgCode.Value.ToString(),roleName,a.OrgCodeSource.OrgName));

                     string encryptedTicket = FormsAuthentication.Encrypt(ticket);

                     HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);

                     Response.Cookies.Add(cookie);

                     return Redirect(returnUrl);

                 }

             }

             // 如果我们进行到这一步时某个地方出错，则重新显示表单

             ModelState.AddModelError("", "提供的用户名或密码不正确。");

             return View(model);

             //if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe))

             //{

             //    return RedirectToLocal(returnUrl);

             //}

             //// 如果我们进行到这一步时某个地方出错，则重新显示表单

             //ModelState.AddModelError("", "提供的用户名或密码不正确。");

             //return View(model);

         }

     public class CustomAuthorizeAttribute:AuthorizeAttribute

     {

         protected override bool AuthorizeCore(HttpContextBase httpContext)

         {

             httpContext.User = App_Codes.WebUtility.GetUser(httpContext);

             return base.AuthorizeCore(httpContext);

         }

     }

 using System;

 using System.Collections.Generic;

 using System.Linq;

 using System.Web;

 using System.Web.Security;

 using System.Security.Principal;

 namespace XXX.App_Codes

 {

     public static class WebUtility

     {

         public static DDTPrincipal GetUser(HttpContextBase httpContext)

         {

             if (httpContext.Request.IsAuthenticated)

             {

                 FormsIdentity fi = httpContext.User.Identity as FormsIdentity;

                 if (fi != null)

                 {

                     string[] userData = fi.Ticket.UserData.Split('|');

                     if (userData.Length == )

                     {

                         DDTPrincipal newPrincipal = new DDTPrincipal(userData[],

                             userData[],userData[],

                             httpContext.User.Identity);

                         return newPrincipal;

                     }

                     return null;

                 }

                 return null;

             }

             return null;

         }

     }

 }

     [CustomAuthorize]

     public class CompanyManageController : Controller{}