CRM系统-----学员管理系统---开发通用权限管理组件

开发通用权限管理组件

 

 

通用的权限管理可以使用管理url的方式进行权限限制

per_dic = {
    "crm.can_access_my_course":{
        "url_type": 0 ,            # 0 = related  1 = absolute
        "url": "stu_my_classes",   #url name
        "method": "GET",
        "args": [ ]
    },
    "crm.can_access_studyrecord":{
        "url_type": 0 ,
        "url": "studyrecords",
        "method": "GET",
        "args": [ ]
    },
    "crm.can_access_homework_detail": {
        "url_type": 0,
        "url": "homework_detail",
        "method": "GET",
        "args": []
    },
}

from crm.permissions import permission_list
from django.shortcuts import redirect,render,HttpResponse
from django.urls import resolve



def perm_check(*args,**kwargs):
    request = args[0]
    if request.user.is_authenticated:  #检测是否登录
        for k,v in permission_list.per_dic.items():
            print("1",k,v)
            url_matched = False  #标识符
            if v["url_type"] == 1: #首先判断url的类型是相对路径还是绝对路径，1=绝对  0=相对
                if v["url"] == request.path:  #绝对路径匹配上
                    url_matched = True
            else:
                resolve_url_obj = resolve(request.path)
                # print("resolve",resolve_url_obj)
                if resolve_url_obj.url_name == v["url"]:#相对路径匹配上
                    url_matched = True

            if url_matched:
                print("2")
                if v["method"] == request.method:#匹配请求的方式
                    args_matched = True
                    for request_args in v["args"]:
                        request_method_func = getattr(request,v["method"])
                        # print("11111",request_method_func)
                        if not request_method_func(request_args):
                            args_matched = False

                    if args_matched: #这里代表这个请求和这个权限定义的规则匹配上了
                        print("3")
                        if request.user.has_perm(k): #代表有权限
                            # print(request.user.has_perm(k))
                            return True



    else:
        return redirect("/account/login/")



def check_permission(func):  # 制作一个装饰器

    def inner(*args,**kwargs):
        # print("permissions",*args,**kwargs)
        # print("func",func)
        if perm_check(*args,**kwargs) is True:  #运行函数
            return func(*args,**kwargs)
        else:
            return HttpResponse("没有权限")
    return inner

class UserProfile(AbstractBaseUser,PermissionsMixin):
    ............


    class Meta:
        permissions = (
            ("can_access_my_course","可以访问我的课程"),
            ("can_access_studyrecord","可以访问我的学习记录"),
            ("can_access_homework_detail","可以访问上交作业"),
        )

制作成装饰器，然后在视图中添加装饰器就OK

 

 

 

 

 

 

 

 

 

############################