function GetLoadNav() {    var data = top.clients.authorizeMenu;    var _html = "";    $.each(data, function (i) {        var row = data[i];        if (row.F_ParentId == "0") {            _html += '
';            _html += '' + row.F_FullName + '';            var childNodes = row.ChildNodes;            if (childNodes.length > 0) {                _html += '
        
         ';                $.each(childNodes, function (i) {                    var subrow = childNodes[i];                    _html += '
         
';                    _html += '' + subrow.F_FullName + '';                    _html += '
';                });                _html += '
        
';            }            _html += '
';        }    });    $("#sidebar-nav ul").prepend(_html);}

var clients = [];$(function () {    clients = $.clientsInit();})$.clientsInit = function () {    var dataJson = {        dataItems: [],        organize: [],        role: [],        duty: [],        user: [],        authorizeMenu: [],        authorizeButton: []    };    var init = function () {        $.ajax({            url: "/ClientsData/GetClientsDataJson",            type: "get",            dataType: "json",            async: false,            success: function (data) {                dataJson.dataItems = data.dataItems;                dataJson.organize = data.organize;                dataJson.role = data.role;                dataJson.duty = data.duty;                dataJson.authorizeMenu = eval(data.authorizeMenu);                dataJson.authorizeButton = data.authorizeButton;            }        });    }    init();    return dataJson;}

$.fn.authorizeButton = function () {    var moduleId = top.$(".NFine_iframe:visible").attr("id").substr(6);    var dataJson = top.clients.authorizeButton[moduleId];    var $element = $(this);    $element.find('a[authorize=yes]').attr('authorize', 'no');    if (dataJson != undefined) {        $.each(dataJson, function (i) {            $element.find("#" + dataJson[i].F_EnCode).attr('authorize', 'yes');        });    }    $element.find("[authorize=no]").parents('li').prev('.split').remove();    $element.find("[authorize=no]").parents('li').remove();    $element.find('[authorize=no]').remove();}

using NFine.Application.SystemManage;using NFine.Code;using System.Text;using System.Web;using System.Web.Mvc;namespace NFine.Web{    public class HandlerAuthorizeAttribute : ActionFilterAttribute    {        public bool Ignore { get; set; }        public HandlerAuthorizeAttribute(bool ignore = true)        {            Ignore = ignore;        }        public override void OnActionExecuting(ActionExecutingContext filterContext)        {            if (OperatorProvider.Provider.GetCurrent().IsSystem)            {                return;            }            if (Ignore == false)            {                return;            }            if (!this.ActionAuthorize(filterContext))            {                StringBuilder sbScript = new StringBuilder();                sbScript.Append("");                filterContext.Result = new ContentResult() { Content = sbScript.ToString() };                return;            }        }        private bool ActionAuthorize(ActionExecutingContext filterContext)        {            var operatorProvider = OperatorProvider.Provider.GetCurrent();            var roleId = operatorProvider.RoleId;            var moduleId = WebHelper.GetCookie("nfine_currentmoduleid");            var action = HttpContext.Current.Request.ServerVariables["SCRIPT_NAME"].ToString();            return new RoleAuthorizeApp().ActionValidate(roleId, moduleId, action);        }    }}