namespace MyWebApi.Models

{

    using System;

    using System.Web;

    using System.Web.Mvc;

    /// <summary>

    /// 检查登陆已经权限问题

    /// </summary>

    public class MyAuthorizeAttribute : AuthorizeAttribute

    {

        public int status = ;//1：登陆有权，2:没有登入，3：登陆无权限

        /// <summary>

        /// 权限检查的入口

        /// </summary>

        /// <param name="httpContext">http的基类</param>

        /// <returns></returns>

        protected override bool AuthorizeCore(HttpContextBase httpContext)

        {

            //这里写逻辑  利用Cookies 判断用户是否登入已经登入是否有权限，然后来给 status 赋值

            #region  我们也可以在使用的时候传入指定的用户以及角色来判断

            string[] users = Users.Split(',');

            string[] roles = Roles.Split(',');

            #endregion

            return status ==;

        }

        /// <summary>

        /// 当检查入口返回false会进入到这里

        /// </summary>

        /// <param name="filterContext"></param>

        protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)

        {

            if (filterContext == null)

            {

                throw new ArgumentNullException("filterContext");

            }

            else

            {

                if (status == ) //没有登陆的页面

                {

                    filterContext.Result = new RedirectResult("");

                }

                else if (status == ) //没有权限访问的页面

                {

                    filterContext.Result = new RedirectResult("");

                }

            }

        }

    }

}

namespace MyWebApi.Models

{

    using System.Web.Mvc;

    /// <summary>

    /// 方法的过滤

    /// </summary>

    public class MyFilterAttribute:ActionFilterAttribute

    {

        /// <summary>

        /// 在方法执行之前

        /// </summary>

        /// <param name="filterContext"></param>

        public override void OnActionExecuting(ActionExecutingContext filterContext)

        {

            //逻辑操作

            filterContext.Result = new RedirectResult("");//跳转页面

        }

        /// <summary>

        /// 在方法之后返回之前

        /// </summary>

        /// <param name="filterContext"></param>

        public override void OnActionExecuted(ActionExecutedContext filterContext)

        {

            //逻辑操作

            filterContext.Result = new RedirectResult("");//跳转页面

        }

        /// <summary>

        /// 在返回之前

        /// </summary>

        /// <param name="filterContext"></param>

        public override void OnResultExecuting(ResultExecutingContext filterContext)

        {

            //逻辑操作

            filterContext.Result = new RedirectResult("");//跳转页面

        }

        /// <summary>

        /// 在返回之后

        /// </summary>

        /// <param name="filterContext"></param>

        public override void OnResultExecuted(ResultExecutedContext filterContext)

        {

            //逻辑操作

            filterContext.Result = new RedirectResult("");//跳转页面

        }

    }

}