ASP如何實(shí)現(xiàn)分級(jí)權(quán)限控制

2024-05-04 11:05:17

字體：大中小

供稿：網(wǎng)友

?ASP如何實(shí)現(xiàn)分級(jí)權(quán)限控制？相信這個(gè)問(wèn)題難倒了不少的新手程序員們，以下是小編針對(duì)這個(gè)問(wèn)題為大家整理的用ASP實(shí)現(xiàn)分級(jí)權(quán)限控制的方法。

用ASP實(shí)現(xiàn)分級(jí)權(quán)限控制?
　　本文實(shí)現(xiàn)的是一個(gè)帳務(wù)管理系統(tǒng)中分級(jí)權(quán)限的控制，程序使用ASP和javascript編寫(xiě)，在裝有IIS4.0的win? NT服務(wù)器上運(yùn)行，速度快，易維護(hù)。
權(quán)限級(jí)別劃分如下：
①、院長(zhǎng)和財(cái)務(wù)科長(zhǎng)：不能輸入，可以無(wú)限制查詢、統(tǒng)計(jì)；
②、副院長(zhǎng)：不能輸入，可以查詢、統(tǒng)計(jì)其分管部門的帳務(wù)；
③、部門領(lǐng)導(dǎo)：不能輸入，可以查詢、統(tǒng)計(jì)本部門的帳務(wù)；
④、會(huì)計(jì)：能輸入各部門的帳務(wù)（一個(gè)會(huì)計(jì)有時(shí)要做幾個(gè)部門的帳），只能查詢、統(tǒng)計(jì)自己輸入的帳務(wù)。
涉及的數(shù)據(jù)庫(kù)和字段如下
①、JK_USER數(shù)據(jù)庫(kù)及字段：id(序列號(hào)),bmid（部門號(hào)）,username（用戶名）,pwd（口令）,right（權(quán)限值）；
②、BM數(shù)據(jù)庫(kù)及字段:id(序列號(hào))? ,bmid(部門號(hào))；
③、JZPZ數(shù)據(jù)庫(kù)及字段：id(序列號(hào))，bm(部門)，? zgs(子公司)，xmz(項(xiàng)目組)，xm（項(xiàng)目），sr（收入），zc(支出)，szfx(收支方向),szxs(收支形式),
rq(日期),jbr(經(jīng)辦人),lrr（錄入人），szsm(收支說(shuō)明)；?
④、ZGS數(shù)據(jù)庫(kù)及字段：id（序列號(hào)）,zgs（子公司）name（公司名）,bmid（部門編號(hào)）。
1．首先進(jìn)行用戶身份合法性驗(yàn)證
　　將用戶提交的用戶名和口令與數(shù)據(jù)庫(kù)JK_USER中的字段對(duì)照對(duì)照，以確定其合法性，只有合法的用戶（系統(tǒng)管理員為其開(kāi)過(guò)戶）才可以進(jìn)入，合法用戶有

四種權(quán)限級(jí)別，分別賦予“1”、“2”、“3”、“4”四種權(quán)限值。（程序略）。
2．憑證記帳（分級(jí)權(quán)限控制）
　　憑證記帳功能是專為會(huì)計(jì)人員服務(wù)的，其他人不可以使用，如以非會(huì)計(jì)人員身份進(jìn)入憑證錄入界面時(shí)，只有“查詢記帳憑證”功能按鈕可見(jiàn)，其它功能

按鈕不可見(jiàn)。錄入的憑證先存放在一個(gè)臨時(shí)表里，稱為“未記帳憑證庫(kù)”，只有運(yùn)行“憑證記帳”功能后才進(jìn)入“憑證庫(kù)”在“未記帳憑證庫(kù)”中的憑證可以

修改。部分程序如下：
'非會(huì)計(jì)人員進(jìn)入，不顯示“憑證記帳”和“保存未記帳憑證”功能按鈕
if? (thisPage.firstEntered)? then?
if? session("tright")<>? "1"? then?
button1.hide
button2.hide
end? if
…………
'自動(dòng)填寫(xiě)時(shí)間和操作人
Textbox7.value=year(date)? &? "-"? &? month(date)? &? "-"? &? day(date)
Textbox9.value? =session("username")?
set? cnn1=server.CreateObject("adodb.connection")
set? rst1=server.CreateObject("adodb.recordset")
cnn1.CursorLocation=3
cnn1.ConnectionTimeout? =30
cnn1.Open? "DSN=jky"
rst1.Open? "select? *? from? bm? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
Id=rst1.Fields("id")
do? while? not? rst1.EOF
Listbox3.addItem? rst1.Fields("bmName"),cint(rst1.Fields("id"))
“Response.Write? rst1.Fields("bmname")? &? rst1.Fields("id")
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? where? bmid="? &? id,cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox4.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
call? writerst
end? if
end? function
………………
'憑證記帳
sub? button2_onclick
dim? s
s=Listbox1.selectedIndex
Response.Write? s
end? sub
sub? listbox3_onchange
dim? id,i
i=Listbox4.getCount()
do? while? i>-1
call? Listbox4.removeItem(i)
i=i-1
loop
id=listbox3.getValue? (listbox3.selectedIndex)
set? cnn2=server.CreateObject("adodb.connection")
set? rst2=server.CreateObject("adodb.recordset")
cnn2.CursorLocation=3
cnn2.ConnectionTimeout? =30
cnn2.Open"DSN=jky"
rst2.Open? "select? zgsName? from? zgs? where? bmid="? &? id,cnn2,1,1,adcmdtext
if? rst2.RecordCount? >0? then
RST2.MoveFirst?
do? while? not? rst2.EOF
Listbox4.addItem? cstr(rst2.Fields("zgsName"))
rst2.MoveNext?
loop
end? if
rst2.Close
cnn2.Close
end? sub
sub? button2_onclick
set? cnn5=server.CreateObject("adodb.connection")
cnn5.CursorLocation=3
cnn5.ConnectionTimeout? =30
cnn5.Open"DSN=jky"
cnn5.Execute? "insert? into? jzpz(bm,zgs,xmz,xm,sr,zc,szfx,szxs,rq,jbr,lrr,szsm)? select? bm,zgs,xmz,xm,sr,zc,szfx,szxs,rq,jbr,

lrr,szsm? from? wjzpz? where? lrr=“"? &? session("username")? &? "“"
cnn5.Execute? "delete? from? wjzpz? where? lrr=“"? &? session("username")? &? "“"
end? sub
3.數(shù)據(jù)查詢（分級(jí)權(quán)限控制）
以憑證的字段為條件進(jìn)行查詢，在供選條件前有一方框供打“√”，其中“部門“條件必選（程序自動(dòng)加上），部門內(nèi)容由程序根據(jù)用戶的權(quán)限自動(dòng)

從數(shù)據(jù)庫(kù)中調(diào)用相應(yīng)值，分公司內(nèi)容根據(jù)所屬部門自動(dòng)調(diào)整，部分程序如下：
……………
'根據(jù)權(quán)限值進(jìn)入相應(yīng)的查詢界面
……………
function? thisPage_onenter()
set? cnn1=server.CreateObject("adodb.connection")
set? rst1=server.CreateObject("adodb.recordset")
cnn1.CursorLocation=3
cnn1.ConnectionTimeout? =30
cnn1.Open? "dsn=jky"
select? case? session("Tright")
case? "3"“副院長(zhǎng)
rst1.Open? "select? bm.bmName? from? jk_user? ,bm? where? JK_user.bmid=bm.id? and? jk_user.username? =“"&? session("username")?

&? "“",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
do? while? not? rst1.EOF
Listbox1.addItem? cstr(rst1.Fields("bmName"))
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
Checkbox1.setChecked? (true)
case? "2"“部門經(jīng)理
Listbox1.addItem? session("bm")
rst1.Open? "select? zgsname? from? zgs? where? bmid="? &? session("bmid"),cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
Checkbox1.setChecked? (true)
“Checkbox1.0?
case? "1"“會(huì)計(jì)?
rst1.Open? "select? bmName? from? bm? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
do? while? not? rst1.EOF
Listbox1.addItem? cstr(rst1.Fields("bmName"))
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
case? "4"“院長(zhǎng)?
rst1.Open? "select? bmName? from? bm? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
RST1.MoveFirst?
do? while? not? rst1.EOF
Listbox1.addItem? cstr(rst1.Fields("bmName"))
rst1.MoveNext?
loop
end? if
rst1.Close
rst1.Open? "select? zgsname? from? zgs? ",cnn1,1,1,adcmdtext
if? rst1.RecordCount? >0? then
rst1.MoveFirst?
do? while? not? rst1.EOF
Listbox2.addItem? cstr(rst1.Fields("zgsname"))
rst1.MoveNext?
loop
end? if
rst1.Close
cnn1.close
end? select?
end? if
…………
end? function
'按照權(quán)限查詢憑證
sub? button1_onclick
dim? rst2,cnn2,str,i
dim? bm(1),zgs(1),xmz(1),xm(1),szfx(1),szxs(1),rq(2),jbr(1)
bm(0)=Checkbox1.getChecked()
if? bm(0)? then
bm(1)=Listbox1.getText(Listbox1.selectedIndex? )
str="? and? bm=“"? &? bm(1)? &? "“"
end? if
zgs(0)=Checkbox2.getChecked()
if? zgs(0)? then
zgs(1)=Listbox2.getText(Listbox2.selectedIndex? )
str=str? &? "? and? zgs? =“"&? zgs(1)? &? "“"
end? if
xmz(0)=Checkbox3.getChecked()
if? xmz(0)? then
xmz(1)=trim(txtxmz.value? )
str=str? &? "? and? xmz? like? “%"? &? xmz(1)? &? "%“"
end? if
xm(0)=Checkbox4.getChecked()
if? xm(0)? then
xm(1)=trim(tztxm.value? )
str=str? &? "? and? xm? like? “%"? &? xm(1)? &? "%“"
end? if
szfx(0)=Checkbox5.getChecked()
if? szfx(0)? then
szfx(1)=Listbox3.getText(Listbox3.selectedIndex? )
str? =str? &? "? and? szfx? =“"? &? szfx(1)? &? "“"
end? if
szxs(0)=Checkbox6.getChecked()
if? szxs(0)? then
szxs(1)=Listbox4.getText(Listbox4.selectedIndex? )
str? =str? &? "? and? szxs? =“"? &? szxs(1)? &? "“"
end? if
jbr(0)=Checkbox8.getChecked()
if? jbr(0)? then
jbr(1)=trim(txtjbr.value? )
str? =str? &? "? and? jbr? like? “%"? &? jbr(1)? &? "%“"
end? if
set? cnn2=server.CreateObject("adodb.connection")
set? rst2=server.CreateObject("adodb.recordset")
cnn2.CursorLocation=3
cnn2.ConnectionTimeout? =30
cnn2.Open? "dsn=jky"
Response.Write? "<table? border=“1“? cellPadding=0? cellSpacing=0? width=“650“? height=“33“? >"
Response.Write? "<tr>"
Response.Write? "<td? width=“100%“? colspan=“6“? height=“44“? align=“middle“? bgcolor=lightblue>"
Response.Write? "<p? align=“center“><b><font? color=“#000084“>記? 帳? 憑? 證? 列? 表"
Response.Write? "</font></b></p></td></tr>? "
Response.Write? "<tr>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "部? 門</td>"
Response.Write? "<td? width=“20%“bgcolor=lightsteelblue>"
Response.Write? "子公司</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "項(xiàng)目組</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "項(xiàng)目名/合同號(hào)</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "收入金額(萬(wàn)元)</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightsteelblue>"
Response.Write? "支出金額(萬(wàn)元)</td></tr>"
if? session("Tright")="1"? then
“Response.Write? "AAAAAAAA"
rst2.Open? "select? *? from? jzpz? where? id>0? and? lrr=“"? &? session("username")? &? "“"? &? str? ,cnn2,1,1,adcmdtext
else
“Response.Write? "FFFFFFFFFFFFF"
rst2.Open? "select? *? from? jzpz? where? id>0? "? &? str? ,cnn2,1,1,adcmdtext
end? if
if? rst2.RecordCount? >0? then
rst2.MoveFirst
rst2.PageSize? =20
rst2.AbsolutePage? =1
i=0
do? while? not? rst2.EOF? and? i<? rst2.PageSize?
Response.Write? "<tr>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey>"&? rst2.Fields("bm")&? "</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey>"&? rst2.Fields("zgs")&? "</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey>"&? rst2.Fields("xmz")&? "</td>"
Response.Write? "<td? width=“15%“? bgcolor=lightgrey><a? href=“FMjz1.asp?Id="&? rst2.Fields("id")? &? "“?

target=“_blank“>"? &? rst2.Fields("xm")&? "</a></td>"
Response.Write? "<td? width=“5%“? bgcolor=lightgrey>"&? rst2.Fields("sr")&? "</td>"
Response.Write? "<td? width=“5%“? bgcolor=lightgrey>"&? rst2.Fields("zc")&? "</td>"
Response.Write? "</tr>"
i=i+1
rst2.MoveNext?
loop
end? if
Response.Write? "</table>"
Response.Write? "</div>"
j=? rst2.PageCount
Response.Write? "<P? align=center><b>共有頁(yè)數(shù)：? "?
for? i=1? to? j
Response.Write? "<a? href=“Fmjzpzck1.asp?ID="? &? i? &? "“? target=“_blank“>"? &? i? &? "</a>"? &? "? "
if? j? mod? 10=? 0? then
Response.Write? "<br>"
end? if
next?
Response.Write? "</b></p>"
rst2.Close
cnn2.Close?
…………
end? sub
　　應(yīng)用以上程序，可以根據(jù)用戶的權(quán)限，按照用戶的要求實(shí)行訂制查詢，該系統(tǒng)在win? NT、IIS4.0和win98、PWS上運(yùn)行通過(guò)。??