[转]SharePoint 2010/2013 使用Javascript来判断权限的三种方法

本文讲述SharePoint 2010/2013 使用Javascript来判断权限的三种方法的实现方式及其优缺点。

1. 根据用户所在的SharePoint组(比如用户在Leader 组才可以使用审批按钮)

a. 优点，简单明了，容易理解，要获得这个权限只有一个入口，就是将用户加入到SharePoint组

b. 缺点， 不能兼容AD group套SharePoint组的情况，只能将用户直接加入到SharePoint组的情况下起作用

c. 实现代码如下：

1. function IsCurrentUserMemberOfGroup(strGroupName, functionComplete) {
2. //Setup Vars
3. currentContext  = null;
4. currentWeb  = null;
5. allGroups   = null;
6. leaderGroup     = null;
7. currentUser     = null;
8. groupUsers  = null;
9. //Get an instance of the Client Content.
10. currentContext = new SP.ClientContext.get_current();
11. //Grab the client web object.
12. currentWeb = currentContext.get_web();
13. //Get the current user object
14. currentUser = currentContext.get_web().get_currentUser();
15. currentContext.load(currentUser);
16. //Setup the groupColletion.
17. allGroups = currentWeb.get_siteGroups();
18. currentContext.load(allGroups);
19. //Now populate the objects above.
20. currentContext.executeQueryAsync(
21. Function.createDelegate(this, GetAllGroupsExecuteOnSuccess),
22. Function.createDelegate(this, ExecuteOnFailure)
23. );
24. // GroupCollection - Load - SUCCESS
25. function GetAllGroupsExecuteOnSuccess(sender, args) {
26. // CHECK THE GROUPS
27. // Time to Enumerate through the group collection that was returned.
28. var groupEnumerator = allGroups.getEnumerator();
29. // Loop for the collection.
30. while (groupEnumerator.moveNext()) {
31. //Grab the Group Item.
32. var group = groupEnumerator.get_current();
33. if (group.get_title().indexOf(strGroupName) > -1) {
34. // Now that we have the group let's grab the list of users.
35. groupUsers = group.get_users();
36. currentContext.load(groupUsers);
37. currentContext.executeQueryAsync(
38. Function.createDelegate(this, SingleGroupExecuteOnSuccess),
39. Function.createDelegate(this, ExecuteOnFailure)
40. );
41. }
42. }
43. }
44. // Single Group - Load - SUCCESS
45. function SingleGroupExecuteOnSuccess(sender, args) {
46. // Time to setup the Enumerator
47. var groupUserEnumerator = groupUsers.getEnumerator();
48. // This is the flag to set to true if the user is in the group.
49. var boolUserInGroup = false;
50. // and start looping.
51. while (groupUserEnumerator.moveNext()) {
52. //Grab the User Item.
53. var groupUser = groupUserEnumerator.get_current();
54. // and finally. If a Group User ID Matches the current user ID then they are in the group!
55. if (groupUser.get_id() == currentUser.get_id()) {
56. boolUserInGroup = true;
57. }
58. }
59. //Run the delegate function with the bool;
60. functionComplete(boolUserInGroup);
61. }
62. // GroupCollection or Single Group - Load - FAILURE
63. function ExecuteOnFailure(sender, args) {
64. //Run the delegate function and return false because there was no match.
65. functionComplete(false);
66. }
67. }
68. IsCurrentUserMemberOfGroup("Lead", function (isCurrentUserInGroup) {
69. if(isCurrentUserInGroup)
70. {
71. // Do something for the user in the correct SP group
72. }
73. });

function IsCurrentUserMemberOfGroup(strGroupName, functionComplete) {
 
        //Setup Vars
        currentContext  = null;
        currentWeb  = null;
        allGroups   = null;
        leaderGroup     = null;
        currentUser     = null;
        groupUsers  = null;
 
        //Get an instance of the Client Content.
        currentContext = new SP.ClientContext.get_current();
 
        //Grab the client web object.
        currentWeb = currentContext.get_web();
 
        //Get the current user object
        currentUser = currentContext.get_web().get_currentUser();
        currentContext.load(currentUser);
 
        //Setup the groupColletion.
        allGroups = currentWeb.get_siteGroups();
        currentContext.load(allGroups);
 
        //Now populate the objects above.
        currentContext.executeQueryAsync(
            Function.createDelegate(this, GetAllGroupsExecuteOnSuccess),
            Function.createDelegate(this, ExecuteOnFailure)
        );
 
        // GroupCollection - Load - SUCCESS
        function GetAllGroupsExecuteOnSuccess(sender, args) {
 
            // CHECK THE GROUPS
            // Time to Enumerate through the group collection that was returned.
            var groupEnumerator = allGroups.getEnumerator();
 
            // Loop for the collection.
            while (groupEnumerator.moveNext()) {
 
                //Grab the Group Item.
                var group = groupEnumerator.get_current();
                if (group.get_title().indexOf(strGroupName) > -1) {
 
                    // Now that we have the group let's grab the list of users.
                    groupUsers = group.get_users();
                    currentContext.load(groupUsers);
                    currentContext.executeQueryAsync(
                        Function.createDelegate(this, SingleGroupExecuteOnSuccess),
                        Function.createDelegate(this, ExecuteOnFailure)
                    );
                }
            }
        }
 
        // Single Group - Load - SUCCESS
        function SingleGroupExecuteOnSuccess(sender, args) {
 
            // Time to setup the Enumerator
            var groupUserEnumerator = groupUsers.getEnumerator();
 
            // This is the flag to set to true if the user is in the group.
            var boolUserInGroup = false;
 
            // and start looping.
            while (groupUserEnumerator.moveNext()) {
 
                //Grab the User Item.
                var groupUser = groupUserEnumerator.get_current();
 
                // and finally. If a Group User ID Matches the current user ID then they are in the group!
                if (groupUser.get_id() == currentUser.get_id()) {
                    boolUserInGroup = true;
                }
            }
 
            //Run the delegate function with the bool;
            functionComplete(boolUserInGroup);
        }
 
        // GroupCollection or Single Group - Load - FAILURE
        function ExecuteOnFailure(sender, args) {
            //Run the delegate function and return false because there was no match.
            functionComplete(false);
        }
    }
IsCurrentUserMemberOfGroup("Lead", function (isCurrentUserInGroup) {
    if(isCurrentUserInGroup)
    {
        // Do something for the user in the correct SP group
    }
});

2. 使用User 类的isSiteAdmin属性

a. 优点：需要写代码少，效率高

b. 缺点：只能判断用户是否为当前站点集管理员，适用场景很少

c. 代码实现如下：

1. var currentUser;
2. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', GetCurrentUser);
3. function GetCurrentUser() {
4. var clientContext = new SP.ClientContext.get_current();
5. var oWeb = clientContext.get_web();
6. currentUser = oWeb.get_currentUser();
7. clientContext.load(currentUser);
8. clientContext.executeQueryAsync(Onsuccess, OnFailed);
9. }
10. function Onsuccess()
11. {
12. if(currentUser.get_isSiteAdmin())
13. {
14. // Do something for the user who is the current site collection admin
15. }
16. }
17. function OnFailed(request, message)
18. {
19. alert('error'  + message);
20. }

var currentUser;
SP.SOD.executeFunc('sp.js', 'SP.ClientContext', GetCurrentUser);
function GetCurrentUser() {
var clientContext = new SP.ClientContext.get_current();
var oWeb = clientContext.get_web();
currentUser = oWeb.get_currentUser();
clientContext.load(currentUser);
clientContext.executeQueryAsync(Onsuccess, OnFailed);
}
function Onsuccess()
{
if(currentUser.get_isSiteAdmin())
{
// Do something for the user who is the current site collection admin
}
}
function OnFailed(request, message)
{
alert('error'  + message);
}

3. 使用 EffectiveBasePermissions，这个也是微软推荐的做法

a. 优点：功能上基本没有限制，可以检查所有SharePoint的权限级别： http://msdn.microsoft.com/en-us/library/ee556747(v=office.14).aspx

b. 缺点：获得权限的入口不是唯一的，可以单独给用户权限，也可以由用户加入到某个组来获取权限

c. 代码实现如下：

1. <script type="text/javascript">
2. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', CheckPermissionOnWeb);
3. function CheckPermissionOnWeb() {
4. context = new SP.ClientContext.get_current();
5. web = context.get_web();
6. this._currentUser = web.get_currentUser();
7. context.load(this._currentUser);
8. context.load(web, 'EffectiveBasePermissions');
9. context.executeQueryAsync(Function.createDelegate(this, this.onSuccessMethod), Function.createDelegate(this, this.onFailureMethod));
10. }
11. function onSuccessMethod(sender, args) {
12. if (web.get_effectiveBasePermissions().has(SP.PermissionKind.manageWeb)) {
13. // User Has permission to manage web
14. //  Do something you want to do for the user who can manage the web
15. }
16. }
17. Function onFailureMethod(sender, args)
18. {
19. alert('error'  +args.message);
20. }
21. </script>

原文地址：http://blog.csdn.net/abrahamcheng/article/details/17447479