这个是我以前写的一个方法，N多个重载就不贴了。
/// <summary>
/// Grant a user or group with a specfic permission level.
/// </summary>
/// <param name="securableObject">An SPSecurable Object, can be SPSite, SPWeb, SPList, SPListItem</param>
/// <param name="principal">SPPrincipal Object, can be a user or group</param>
/// <param name="roleDefinition">permission level</param>
/// <param name="clearBeforeAdd">clear all permission levels before added a new one.</param>
/// <remarks>Lambert@20120411</remarks>
public void GrantPermission(SPSecurableObject securableObject, SPPrincipal principal, SPRoleDefinition roleDefinition, bool clearBeforeAdd)
{
SPRoleAssignment roleAssignment = null;
try
{
//try to find the role assignment for the user.
roleAssignment = securableObject.RoleAssignments.GetAssignmentByPrincipal(principal);
}
catch (System.ArgumentException)
{
//The user or group does not exist in the collection at the given scope.
roleAssignment = null;
}
if (roleAssignment == null)
{
roleAssignment = new SPRoleAssignment(principal);
roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
securableObject.RoleAssignments.Add(roleAssignment);
}
else
{
if (clearBeforeAdd) { roleAssignment.RoleDefinitionBindings.RemoveAll(); }
if (!roleAssignment.RoleDefinitionBindings.Contains(roleDefinition))
{
roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
roleAssignment.Update();
}
}
}
上善若水
Lambert Qin [秦磊] | 博客(Blog): SharePoint in My Eyes
中文 /
LinkedInPosting is provided "AS IS" with no warranties, and confers no rights.
