c# - WebGrid MVC 5 – 显示基于身份验证和授权的操作按钮

Question

在WebGrid 的最后一列有3 个按钮“创建、编辑、删除”。如标题所示，如果用户经过身份验证和授权，我只想显示“编辑”和“删除”按钮。

如果链接不在 WebGrid 中，例如“添加”按钮，我可以这样做:

<div >
     @if (Request.IsAuthenticated && (User.IsInRole("Admin") || User.IsInRole("canEdit")))
     {
         <a class="btn btn-success" href="@Url.Action("Create" )" id="btnCreate"><i class='glyphicon glyphicon-plus'></i> </a>
     }
</div>

在网格中，我以这种方式格式化了最后一列:

grid.Column(header: "Action", canSort: false, style: "action  col-lg-2",
            format: (item) => new HtmlString("<a href=" + @Url.Action("Details", new { id = item.id }) + " title='Detail' ><i class='glyphicon glyphicon-search'> </i><span class='sr-only'>Detail</span> </a> " 
                + " <a href=" + @Url.Action("Edit", new { id = item.id }) + "><i class='glyphicon glyphicon-edit'></i><span class='sr-only'>Edit</span> </a> " 
                + " <a href=" + @Url.Action("Delete", new { id = item.id }) + "><i class='glyphicon glyphicon-trash'> </i> </a> ") 
              )

而且效果很好。但我无法弄清楚如何将 if 语句放入 lambda 表达式中。我该怎么做？

代码如下:

var grid = new WebGrid(canPage: true, rowsPerPage: Model.PageSize, canSort: true, ajaxUpdateContainerId: "grid");
grid.Bind(Model.Content, rowCount: Model.TotalRecords, autoSortAndPage: false);
@grid.GetHtml(htmlAttributes: new { id = "grid" },  // id for ajaxUpdateContainerId parameter
fillEmptyRows: false,
tableStyle: "table table-bordered table-hover",
mode: WebGridPagerModes.All,
columns: grid.Columns(
         grid.Column("Id", "ID", style: "col-lg-1"),
         grid.Column("ProductName", "Name", style: "col-lg-3"),
         grid.Column("Description", "Description", style: "col-lg-5"),
         grid.Column(header: "Action", canSort: false, style: "action  col-lg-2",
         format: (item) => new HtmlString("<a href=" + @Url.Action("Details", new { id = item.id }) + " title='Detail' ><i class='glyphicon glyphicon-search'> </i><span class='sr-only'>Detail</span> </a> " 
             + " <a href=" + @Url.Action("Edit", new { id = item.id }) + "><i class='glyphicon glyphicon-edit'></i><span class='sr-only'>Edit</span> </a> " 
             + " <a href=" + @Url.Action("Delete", new { id = item.id }) + "><i class='glyphicon glyphicon-trash'> </i> </a> ")                   )
             )
         );

Answer 1

您可以通过以下方式进行授权。

@if ( User.Identity.IsAuthenticated ){
    if ( User.IsInRole("Admin") ){
        + " <a href=" + @Url.Action("Edit", new { id = item.id }) + "><i class='glyphicon glyphicon-edit'></i><span class='sr-only'>Edit</span> </a> " 
                + " <a href=" + @Url.Action("Delete", new { id = item.id }) + "><i class='glyphicon glyphicon-trash'> </i> </a>        
    }
}

并记得将 [Authorize] 属性添加到您的 Admin 操作方法:

[Authorize(Roles="Admin")]
public ActionResult Edit()
{
    // ...
    return View();
}

[Authorize(Roles="Admin")]
public ActionResult Delete()
{
    // ...
    return View();
}