TP后台权限管理笔记

摘要：管理员表用户用户名密码添加时间最后登录时间最后登录权限角色角色表角色角色名称权限列表角色描述功能菜单表权限名字所属分组权限码控制器动作删除状态删除正常根据角色权限过滤菜单过滤菜单系统设置网站设置友情链接自定义导航区域管理权限资源列表

//管理员表
CREATE TABLE `qz_admin` (
  `admin_id` smallint(5) unsigned NOT NULL AUTO_INCREMENT COMMENT "用户id",
  `admin_name` varchar(60) NOT NULL DEFAULT "" COMMENT "用户名",
  `email` varchar(60) NOT NULL DEFAULT "" COMMENT "email",
  `password` varchar(32) NOT NULL DEFAULT "" COMMENT "密码",
  `add_time` int(11) NOT NULL DEFAULT "0" COMMENT "添加时间",
  `last_login` int(11) NOT NULL DEFAULT "0" COMMENT "最后登录时间",
  `last_ip` varchar(15) NOT NULL DEFAULT "" COMMENT "最后登录ip",
  `nav_list` text NOT NULL COMMENT "权限",
  `role_id` smallint(5) DEFAULT NULL COMMENT "角色id",
  PRIMARY KEY (`admin_id`),
  KEY `user_name` (`user_name`) USING BTREE
) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
//角色表
CREATE TABLE `qz_admin_role` (
  `role_id` smallint(6) unsigned NOT NULL AUTO_INCREMENT COMMENT "角色ID",
  `role_name` varchar(30) DEFAULT NULL COMMENT "角色名称",
  `act_list` text COMMENT "权限列表",
  `role_desc` varchar(255) DEFAULT NULL COMMENT "角色描述",
  PRIMARY KEY (`role_id`)
) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;
//功能菜单表
CREATE TABLE `qz_system_menu` (
  `id` smallint(6) unsigned NOT NULL AUTO_INCREMENT,
  `name` varchar(50) DEFAULT NULL COMMENT "权限名字",
  `group` varchar(20) DEFAULT NULL COMMENT "所属分组",
  `right` text COMMENT "权限码(控制器+动作)",
  `is_del` tinyint(1) DEFAULT "0" COMMENT "删除状态 1删除,0正常",
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=18 DEFAULT CHARSET=utf8;

function getMenuList($act_list){
    //根据角色权限过滤菜单
    $menu_list = getAllMenu();
    if($act_list != "all"){
        $right = M("system_menu")->where("id in ($act_list)")->cache(false)->getField("right",true);
        $role_right = "";
        foreach ($right as $val){
            $role_right .= $val.",";
        }
        $role_right = explode(",", $role_right);
        foreach($menu_list as $k=>$mrr){
            foreach ($mrr["sub_menu"] as $j=>$v){
                if(!in_array($v["control"]."Controller@".$v["act"], $role_right)){
                    unset($menu_list[$k]["sub_menu"][$j]);//过滤菜单
                }
            }
        }
    }
    return $menu_list;
}
function getAllMenu(){
    return    array(
            "system" => array("name"=>"系统设置","icon"=>"fa-cog","sub_menu"=>array(
                    array("name"=>"网站设置","act"=>"index","control"=>"System"),
                    array("name"=>"友情链接","act"=>"linkList","control"=>"Article"),
                    array("name"=>"自定义导航","act"=>"navigationList","control"=>"System"),
                    array("name"=>"区域管理","act"=>"region","control"=>"Tools"),
                    array("name"=>"权限资源列表","act"=>"right_list","control"=>"System"),
            )),
            "access" => array("name" => "权限管理", "icon"=>"fa-gears", "sub_menu" => array(
                    array("name" => "管理员列表", "act"=>"index", "control"=>"Admin"),
                    array("name" => "角色管理", "act"=>"role", "control"=>"Admin"),
                    array("name" => "供应商管理", "act"=>"supplier", "control"=>"Admin"),
                    array("name" => "管理员日志", "act"=>"log", "control"=>"Admin"),
            )),
            "member" => array("name"=>"会员管理","icon"=>"fa-user","sub_menu"=>array(
                    array("name"=>"会员列表","act"=>"index","control"=>"User"),
                    array("name"=>"会员等级","act"=>"levelList","control"=>"User"),
            )),
            "article" => array("name" => "文章管理", "icon"=>"fa-comments", "sub_menu" => array(
                    array("name" => "文章列表", "act"=>"articleList", "control"=>"Article"),
                    array("name" => "文章分类", "act"=>"categoryList", "control"=>"Article"),
                    array("name" => "专题列表", "act"=>"topicList", "control"=>"Topic"),
            ))
    );
}

//权限验证函数(TP), 入口初始化执行
public function check_priv()
{
    $ctl = CONTROLLER_NAME;
    $act = ACTION_NAME;
    $act_list = session("act_list");
    //无需验证的操作
    $uneed_check = array("login","logout","vertifyHandle","vertify","imageUp","upload","login_task");
    if($ctl == "Index" || $act_list == "all"){
        //后台首页控制器无需验证,超级管理员无需验证
        return true;
    }elseif(strpos("ajax",$act) || in_array($act,$uneed_check)){
        //所有ajax请求不需要验证权限
        return true;
    }else{
        $role_right = "";
        $right = M("system_menu")->where("id in ($act_list)")->cache(true)->getField("right",true);
        foreach ($right as $val){
            $role_right .= $val.",";
        }
        $role_right = explode(",", $role_right);
        //检查是否拥有此操作权限
        if(!in_array($ctl."Controller@".$act, $role_right)){
            $this->error("您没有操作权限,请联系超级管理员分配权限",U("Admin/Index/index"));
        }
    }
}

//权限分配，给角色添加、修改权限
public function role_info(){
    $role_id = I("get.role_id");
    $tree = $detail = array();
    if($role_id){
        $detail = M("admin_role")->where("role_id=$role_id")->find();
        $detail["act_list"] = explode(",", $detail["act_list"]);
        $this->assign("detail",$detail);
    }
    $right = M("system_menu")->order("id")->select();
    foreach ($right as $val){
        if(!empty($detail)){
            $val["enable"] = in_array($val["id"], $detail["act_list"]);
        }
        $modules[$val["group"]][] = $val;
    }
    //权限组（对应数据表里面的group字段）
    $group = array("system"=>"系统管理","access"=>"权限管理",article"=>"文章管理"，"member"=>"会员管理");
    $this->assign("group",$group);
    $this->assign("modules",$modules);
    $this->display();
}
//权限分配保存
public function roleSave(){
    $data = I("post.");
    $res = $data["data"];
    $res["act_list"] = is_array($data["right"]) ? implode(",", $data["right"]) : "";
    if(empty($data["role_id"])){
        $r = D("admin_role")->add($res);
    }else{
        $r = D("admin_role")->where("role_id=".$data["role_id"])->save($res);
    }
    if($r){
        adminLog("管理角色",__ACTION__);
        $this->success("操作成功!",U("Admin/Admin/role_info",array("role_id"=>$data["role_id"])));
    }else{
        $this->success("操作失败!",U("Admin/Admin/role"));
    }
}