ASP如何實現分級權限控制

2024-05-04 11:05:17

字體：大中小

來源：轉載

供稿：網友

?ASP如何實現分級權限控制？相信這個問題難倒了不少的新手程序員們，以下是小編針對這個問題為大家整理的用ASP實現分級權限控制的方法。

用ASP實現分級權限控制?
　　本文實現的是一個帳務管理系統中分級權限的控制，程序使用ASP和javascript編寫，在裝有IIS4.0的win? NT服務器上運行，速度快，易維護。
權限級別劃分如下：
①、院長和財務科長：不能輸入，可以無限制查詢、統計；
②、副院長：不能輸入，可以查詢、統計其分管部門的帳務；
③、部門領導：不能輸入，可以查詢、統計本部門的帳務；
④、會計：能輸入各部門的帳務（一個會計有時要做幾個部門的帳），只能查詢、統計自己輸入的帳務。
涉及的數據庫和字段如下
①、JK_USER數據庫及字段：id(序列號),bmid（部門號）,username（用戶名）,pwd（口令）,right（權限值）；
②、BM數據庫及字段:id(序列號)? ,bmid(部門號)；
③、JZPZ數據庫及字段：id(序列號)，bm(部門)，? zgs(子公司)，xmz(項目組)，xm（項目），sr（收入），zc(支出)，szfx(收支方向),szxs(收支形式),
rq(日期),jbr(經辦人),lrr（錄入人），szsm(收支說明)；?
④、ZGS數據庫及字段：id（序列號）,zgs（子公司）name（公司名）,bmid（部門編號）。
1．首先進行用戶身份合法性驗證
　　將用戶提交的用戶名和口令與數據庫JK_USER中的字段對照對照，以確定其合法性，只有合法的用戶（系統管理員為其開過戶）才可以進入，合法用戶有

四種權限級別，分別賦予“1”、“2”、“3”、“4”四種權限值。（程序略）。
2．憑證記帳（分級權限控制）
　　憑證記帳功能是專為會計人員服務的，其他人不可以使用，如以非會計人員身份進入憑證錄入界面時，只有“查詢記帳憑證”功能按鈕可見，其它功能

按鈕不可見。錄入的憑證先存放在一個臨時表里，稱為“未記帳憑證庫”，只有運行“憑證記帳”功能后才進入“憑證庫”在“未記帳憑證庫”中的憑證可以

修改。部分程序如下：
'非會計人員進入，不顯示“憑證記帳”和“保存未記帳憑證”功能按鈕
if? (thisPage.firstEntered)? then?
if? session("tright")<>? "1"? then?
button1.hide
button2.hide
end? if
…………
'自動填寫時間和操作人
Textbox7.value=year(date)? &? "-"? &? month(date)? &? "-"? &? day(date)
Textbox9.value? =session("username")?
set? cnn1=server.CreateObject("adodb.connection")
set? rst1=server.CreateObject("adodb.recordset")
cnn1.CursorLocation=3
cnn1.ConnectionTimeout? =30
cnn1.Open? "DSN=jky"
rst1.Open? "select? *? from? bm? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
Id=rst1.Fields("id")
do? while? not? rst1.EOF
Listbox3.addItem? rst1.Fields("bmName"),cint(rst1.Fields("id"))
“Response.Write? rst1.Fields("bmname")? &? rst1.Fields("id")
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? where? bmid="? &? id,cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox4.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
call? writerst
end? if
end? function
………………
'憑證記帳
sub? button2_onclick
dim? s
s=Listbox1.selectedIndex
Response.Write? s
end? sub
sub? listbox3_onchange
dim? id,i
i=Listbox4.getCount()
do? while? i>-1
call? Listbox4.removeItem(i)
i=i-1
loop
id=listbox3.getValue? (listbox3.selectedIndex)
set? cnn2=server.CreateObject("adodb.connection")
set? rst2=server.CreateObject("adodb.recordset")
cnn2.CursorLocation=3
cnn2.ConnectionTimeout? =30
cnn2.Open"DSN=jky"
rst2.Open? "select? zgsName? from? zgs? where? bmid="? &? id,cnn2,1,1,adcmdtext
if? rst2.RecordCount? >0? then
RST2.MoveFirst?
do? while? not? rst2.EOF
Listbox4.addItem? cstr(rst2.Fields("zgsName"))
rst2.MoveNext?
loop
end? if
rst2.Close
cnn2.Close
end? sub
sub? button2_onclick
set? cnn5=server.CreateObject("adodb.connection")
cnn5.CursorLocation=3
cnn5.ConnectionTimeout? =30
cnn5.Open"DSN=jky"
cnn5.Execute? "insert? into? jzpz(bm,zgs,xmz,xm,sr,zc,szfx,szxs,rq,jbr,lrr,szsm)? select? bm,zgs,xmz,xm,sr,zc,szfx,szxs,rq,jbr,

lrr,szsm? from? wjzpz? where? lrr=“"? &? session("username")? &? "“"
cnn5.Execute? "delete? from? wjzpz? where? lrr=“"? &? session("username")? &? "“"
end? sub
3.數據查詢（分級權限控制）
以憑證的字段為條件進行查詢，在供選條件前有一方框供打“√”，其中“部門“條件必選（程序自動加上），部門內容由程序根據用戶的權限自動

從數據庫中調用相應值，分公司內容根據所屬部門自動調整，部分程序如下：
……………
'根據權限值進入相應的查詢界面
……………
function? thisPage_onenter()
set? cnn1=server.CreateObject("adodb.connection")
set? rst1=server.CreateObject("adodb.recordset")
cnn1.CursorLocation=3
cnn1.ConnectionTimeout? =30
cnn1.Open? "dsn=jky"
select? case? session("Tright")
case? "3"“副院長
rst1.Open? "select? bm.bmName? from? jk_user? ,bm? where? JK_user.bmid=bm.id? and? jk_user.username? =“"&? session("username")?

&? "“",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
do? while? not? rst1.EOF
Listbox1.addItem? cstr(rst1.Fields("bmName"))
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
Checkbox1.setChecked? (true)
case? "2"“部門經理
Listbox1.addItem? session("bm")
rst1.Open? "select? zgsname? from? zgs? where? bmid="? &? session("bmid"),cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
Checkbox1.setChecked? (true)
“Checkbox1.0?
case? "1"“會計?
rst1.Open? "select? bmName? from? bm? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
do? while? not? rst1.EOF
Listbox1.addItem? cstr(rst1.Fields("bmName"))
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
case? "4"“院長?
rst1.Open? "select? bmName? from? bm? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
do? while? not? rst1.EOF
Listbox1.addItem? cstr(rst1.Fields("bmName"))
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
end? select?
end? if
…………
end? function
'按照權限查詢憑證
sub? button1_onclick
dim? rst2,cnn2,str,i
dim? bm(1),zgs(1),xmz(1),xm(1),szfx(1),szxs(1),rq(2),jbr(1)
bm(0)=Checkbox1.getChecked()
if? bm(0)? then
bm(1)=Listbox1.getText(Listbox1.selectedIndex? )
str="? and? bm=“"? &? bm(1)? &? "“"
end? if
zgs(0)=Checkbox2.getChecked()
if? zgs(0)? then
zgs(1)=Listbox2.getText(Listbox2.selectedIndex? )
str=str? &? "? and? zgs? =“"&? zgs(1)? &? "“"
end? if
xmz(0)=Checkbox3.getChecked()
if? xmz(0)? then
xmz(1)=trim(txtxmz.value? )
str=str? &? "? and? xmz? like? “%"? &? xmz(1)? &? "%“"
end? if
xm(0)=Checkbox4.getChecked()
if? xm(0)? then
xm(1)=trim(tztxm.value? )
str=str? &? "? and? xm? like? “%"? &? xm(1)? &? "%“"
end? if
szfx(0)=Checkbox5.getChecked()
if? szfx(0)? then
szfx(1)=Listbox3.getText(Listbox3.selectedIndex? )
str? =str? &? "? and? szfx? =“"? &? szfx(1)? &? "“"
end? if
szxs(0)=Checkbox6.getChecked()
if? szxs(0)? then
szxs(1)=Listbox4.getText(Listbox4.selectedIndex? )
str? =str? &? "? and? szxs? =“"? &? szxs(1)? &? "“"
end? if
jbr(0)=Checkbox8.getChecked()
if? jbr(0)? then
jbr(1)=trim(txtjbr.value? )
str? =str? &? "? and? jbr? like? “%"? &? jbr(1)? &? "%“"
end? if
set? cnn2=server.CreateObject("adodb.connection")
set? rst2=server.CreateObject("adodb.recordset")
cnn2.CursorLocation=3
cnn2.ConnectionTimeout? =30
cnn2.Open? "dsn=jky"
Response.Write? "<table? border=“1“? cellPadding=0? cellSpacing=0? width=“650“? height=“33“? >"
Response.Write? "<tr>"
Response.Write? "<td? width=“100%“? colspan=“6“? height=“44“? align=“middle“? bgcolor=lightblue>"
Response.Write? "<p? align=“center“><b><font? color=“#000084“>記? 帳? 憑? 證? 列? 表"
Response.Write? "</font></b></p></td></tr>? "
Response.Write? "<tr>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "部? 門</td>"
Response.Write? "<td? width=“20%“bgcolor=lightsteelblue>"
Response.Write? "子公司</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "項目組</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "項目名/合同號</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "收入金額(萬元)</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "支出金額(萬元)</td></tr>"
if? session("Tright")="1"? then
“Response.Write? "AAAAAAAA"
rst2.Open? "select? *? from? jzpz? where? id>0? and? lrr=“"? &? session("username")? &? "“"? &? str? ,cnn2,1,1,adcmdtext
else
“Response.Write? "FFFFFFFFFFFFF"
rst2.Open? "select? *? from? jzpz? where? id>0? "? &? str? ,cnn2,1,1,adcmdtext
end? if
if? rst2.RecordCount? >0? then
rst2.MoveFirst
rst2.PageSize? =20
rst2.AbsolutePage? =1
i=0
do? while? not? rst2.EOF? and? i<? rst2.PageSize?
Response.Write? "<tr>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey>"&? rst2.Fields("bm")&? "</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey>"&? rst2.Fields("zgs")&? "</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey>"&? rst2.Fields("xmz")&? "</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey><a? href=“FMjz1.asp?Id="&? rst2.Fields("id")? &? "“?

target=“_blank“>"? &? rst2.Fields("xm")&? "</a></td>"
Response.Write? "<td? width=“5%“? bgcolor=lightgrey>"&? rst2.Fields("sr")&? "</td>"
Response.Write? "<td? width=“5%“? bgcolor=lightgrey>"&? rst2.Fields("zc")&? "</td>"
Response.Write? "</tr>"
i=i+1
rst2.MoveNext?
loop
end? if
Response.Write? "</table>"
Response.Write? "</div>"
j=? rst2.PageCount
Response.Write? "<P? align=center><b>共有頁數：? "?
for? i=1? to? j
Response.Write? "<a? href=“Fmjzpzck1.asp?ID="? &? i? &? "“? target=“_blank“>"? &? i? &? "</a>"? &? "? "
if? j? mod? 10=? 0? then
Response.Write? "<br>"
end? if
next?
Response.Write? "</b></p>"
rst2.Close
cnn2.Close?
…………
end? sub
　　應用以上程序，可以根據用戶的權限，按照用戶的要求實行訂制查詢，該系統在win? NT、IIS4.0和win98、PWS上運行通過。??