不能重定向角色的看法

Question

我在這裏有這些代碼的登錄POST和GET

[Authorize] 
public class AccountController : Controller 
{ 
    // 
    // GET: /Account/Login 

    [AllowAnonymous] 
    public ActionResult Login(string returnUrl) 
    { 
     ViewBag.ReturnUrl = returnUrl; 
     return View(); 
    } 

    // 
    // POST: /Account/Login 

    [HttpPost] 
    [AllowAnonymous] 
    [ValidateAntiForgeryToken] 
    public ActionResult Login(LoginModel model, string returnUrl) 
    { 
     if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe)) 
     { 
      return RedirectToLocal(returnUrl); 
     } 


     if (User.IsInRole("Owner")) 
     { 
      return RedirectToAction("Index", "AdminOnly"); 
     } 

     // If we got this far, something failed, redisplay form 
     ModelState.AddModelError("", "The user name or password provided is incorrect."); 
     return View(model); 
    } 

我的問題，但是，當我嘗試登錄管理員帳戶，我得到重定向到〜/共享/佈局。我該怎麼辦？提前致謝！

Answer 1

之前更改方法來測試用戶的角色我在這同一論壇閱讀@KurtSchindler答案。此代碼塊的作品像一個魅力

if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe)) 
     { 
      string[] roles = Roles.GetRolesForUser(model.UserName); 
      if (roles.Contains("Owner") || roles.Contains("Superuser")) 
      { 
       return RedirectToAction("Index", "AdminOnly"); 
      } 
      else 
      { 
       return RedirectToAction("Index", "Home"); 
      } 
     } 

它現在將我重定向到AdminOnly控制器內的索引。希望這可以幫助！謝謝！

Answer 2

如果有效，您的第一個if語句會立即重定向用戶。由於您已退出該方法，因此您無法檢查其角色。重定向

public ActionResult Login(LoginModel model, string returnUrl) 
{ 
    if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe)) 
    { 
    if (User.IsInRole("Owner")) 
    { 
     return RedirectToAction("Index", "AdminOnly"); 
    } 
    else 
    { 
     return RedirectToLocal(returnUrl); 
    } 
    } 
    ModelState.AddModelError("", "The user name or password provided is incorrect."); 
    return View(model); 
}