权限管理页面控制(2)

            string requestPage = null;                                     
            if (end < 0) end = url.Length - 1;
            requestPage=url.Substring(start, end - start +1);               //得到所请求的页面
            requestPage = requestPage.ToLower();
            if (requestPage == loginPage) return;
            if (!isProtectedResource(requestPage)) return;
            User user=SJL.Web.HttpCode.WebUtility.currentUser;              //获得当前用户         
            if (user==null)
            {
                application.Response.Redirect("~/Login.aspx");
                return;
            }               
            if (SJL.Bll.UserRight.UserBLL.isAdmin(user)) return;                    
            //检测用户权限 www.2cto.com
            if (!SJL.Bll.UserRight.RoleRightBLL.canAccessPage(user.RoleID, requestPage))               
                application.Response.Redirect("~/AccessDeny.htm");
        }

        /// <summary>
        /// 判断页面是否为受权限管理保护的资源（如Aspx等）
        /// </summary>
        /// <param name="page">所请求的页面</param>
        /// <returns>是否受保护</returns>