protected override IPermissionManager CreatePermissionManager() { //传入的permission为null或"",则默认只进行身份认证,不进行授权验证,都能访问 return new WebApiPermissionManager(new PermissionSupportService(), Permission, string.IsNullOrWhiteSpace(Permission)); }