创建产品和订单控制器.docxVIP

【ASP.NET Web API教程】2.3.6 创建产品和订单控制器注：本文是【ASP.NET Web API系列教程】的一部分，如果您是第一次看本博客文章，请先看前面的内容。Part 6: Creating Product and Order Controllers第6部分：创建产品和订单控制器本文引自：/web-api/overview/creating-web-apis/using-web- api-with-entity-framework/using-web-api-with-entity-framework,-part-6Add a Products Controller添加产品控制器The Admin controller is for users who have administrator privileges. Customers, on the other hand, can view products but cannot create, update, or delete them.Admin控制器是用于具有管理员权限的用户的。另一方面，一般客户可以查看产品，但不能创建、更新或删除。We can easily restrict access to the Post, Put, and Delete methods, while leaving the Get methods open. But look at the data that is returned for a product:我们可以很容易地对Post、Put和Delete方法进行限制访问，而只让Get方法是开放的。但先看一看针对一个产品所返回的数据：{Id:1,Name:Tomato Soup,Price:1.39,ActualCost:0.99}The ActualCost property should not be visible to customers! The solution is to define a data transfer object (DTO) that includes a subset of properties that should be visible to customers. We will use LINQ to project Product instances to ProductDTO instances.ActualCost（实际开销，指该产品的成本 — 译者注）属性不应该是客户可见的。其解决方案是定义包含属性子集的、客户可见的一个data transfer object（DTO — 数据传输对象）。我们将用LINQ把Product实例投影到ProductDTO实例。Add a class named ProductDTO to the Models folder.添加一个名称为ProductDTO的类到Models文件夹：namespace ProductStore.Models { public class ProductDTO { public int Id { get; set; } public string Name { get; set; } public decimal Price { get; set; } } }Now add the controller. In Solution Explorer, right-click the Controllers folder. Select Add, then select Controller. In the Add Controller dialog, name the controller ProductsController. Under Template, select Empty API controller.现在添加控制器。在“解决方案资源管理器”中右击Controllers文件夹。选择“添加”，然后选择“控制器”。在“添加控制器”对话框中，将此控制器命名为“ProductsController”。在“模板”的下面选择“空的API控制器”（见图2-24）。图2-24. 添加ProductsController控制器Replace everything in the source file with the following code:用以下代码替换源文件的全部内容：namespace ProductStore.Controllers { using System.Collections.Generic; using