如何在SQL中为SQLMembershipProvider添加用户和角色？

Question

我们正在迁移到生产环境,我想编写一个sript,DBA可以在运行我生成的脚本后立即创建具有角色的用户aspnet_regsql.在开发环境中,我一直在Global.asax.cs中使用Membership Provider的API添加用户和角色.但我想避免这种硬编码方法.现在我的T-SQL缺乏经验.我编写了以下脚本,如果我不立即运行它,它就可以工作.

Use MyApps_Prod;
GO

DECLARE @user_identity CHAR(40);
DECLARE @scalar_userid AS NVARCHAR(255);
DECLARE @scalar_roleid AS NVARCHAR(255);
DECLARE @app_id AS NVARCHAR(255);
SET @user_identity = N'AMERICAS\First.Last';

SET @app_id = (SELECT DISTINCT ApplicationId 
            FROM [dbo].[aspnet_Applications] 
            WHERE loweredapplicationname = 'MyApplication');
SELECT * FROM [dbo].[aspnet_Users] WHERE UserName = @user_identity

IF NOT EXISTS (SELECT * FROM [dbo].[aspnet_Users] WHERE UserName = @user_identity ) 
BEGIN
    INSERT INTO [dbo].aspnet_Users
             ( [ApplicationId], [UserName], [LoweredUserName], [LastActivityDate] )
    VALUES
        ( @app_id, @user_identity, LOWER(@user_identity), GETDATE());
END;

DECLARE @role_name CHAR(40);
SET @role_name = N'Communicator';
IF NOT EXISTS (SELECT * FROM [dbo].[aspnet_Roles] WHERE RoleName = @role_name ) 
BEGIN
    INSERT INTO [dbo].[aspnet_Roles]
        ( [ApplicationId], [RoleName], [LoweredRoleName])
    VALUES
        (@app_id, @role_name, LOWER(@role_name))
END;


SET @scalar_userid = (SELECT DISTINCT UserID FROM [dbo].aspnet_Users WHERE UserName = @user_identity);
SET @scalar_roleid = (SELECT DISTINCT RoleID FROM [dbo].aspnet_Roles WHERE RoleName = @role_name);

INSERT INTO [dbo].aspnet_UsersInRoles (UserID, RoleID)
    VALUES (
        @scalar_userid ,
        @scalar_roleid
    );


SET @role_name = N'AccessAdministrator';
IF NOT EXISTS (SELECT * FROM [dbo].[aspnet_Roles] WHERE RoleName = @role_name ) 
BEGIN
    INSERT INTO [dbo].[aspnet_Roles]
        ( [ApplicationId], [RoleName], [LoweredRoleName])
    VALUES
        (@app_id, @role_name, LOWER(@role_name))
END;


SET @scalar_roleid = (SELECT DISTINCT RoleID FROM [dbo].aspnet_Roles WHERE RoleName = @role_name);

INSERT INTO [dbo].aspnet_UsersInRoles (UserID, RoleID)
    VALUES (
        @scalar_userid ,
        @scalar_roleid
    );
GO

我发现INSERTs如果我INSERT用分号结束然后添加GO,我可以开始工作,但是我需要重新声明并重新分配每个变量.

真正的SQL开发人员将如何做到这一点？

Answer 1

不是手动编写INSERT语句,而是使用属于SqlMembershipProvider实现提供程序的存储过程,并在使用该aspnet_reg.exe工具安装应用程序服务时包含这些存储过程.

特别是,使用:

• aspnet_Roles_CreateRole 创造一个新角色
• aspnet_Membership_CreateUser 创建用户并提供其成员资格数据(密码,安全问题和答案等)
• aspnet_UsersInRoles_AddUsersToRoles 将现有用户添加到现有角色

这aspnet_Membership_CreateUser是该批次中唯一棘手的问题.假设您不是以纯文本形式存储密码,则需要通过@Password参数将散列或加密版本传入sproc .我建议使用Reflector来检查SqlMembershipProvider类CreateUser方法中的代码.在那里,您将看到.NET如何在封面下处理这个逻辑.

作为脚本编写的替代方法,请考虑编写一个命令行程序,该程序可能会读取文本文件并创建指定的角色,用户和用户角色关联.此命令行程序将直接使用Membership API,因此将处理所有低级别详细信息.然后,您可以在构建或部署过程中执行此命令行程序.

快乐编程!