224 lines
7.4 KiB
Lua
224 lines
7.4 KiB
Lua
require("fwutils.webapi")
|
||
-- CREATE TABLE `fw_role_permissions` (
|
||
-- `id` int NOT NULL AUTO_INCREMENT,
|
||
-- `path` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT '路径',
|
||
-- `role_id` int DEFAULT NULL COMMENT '角色',
|
||
-- `action` varchar(2048) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT '动作',
|
||
-- `desc` varchar(1024) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT '描述',
|
||
-- `create_time` datetime DEFAULT NULL COMMENT '创建时间',
|
||
-- `update_time` datetime DEFAULT NULL COMMENT '更新时间',
|
||
-- `delete_time` datetime DEFAULT NULL COMMENT '删除时间',
|
||
-- PRIMARY KEY (`id`),
|
||
-- UNIQUE KEY `path` (`path`,`role_id`)
|
||
-- ) ENGINE=InnoDB AUTO_INCREMENT=11 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='Fastweb-角色访问权限';
|
||
local M = {}
|
||
|
||
M.get_by_id = function(id,conn)
|
||
local select = conn:select()
|
||
select:table("fw_role_permissions LEFT JOIN fw_role ON fw_role_permissions.role_id = fw_role.id")
|
||
select:field({
|
||
"fw_role_permissions.id",
|
||
"fw_role_permissions.path",
|
||
"fw_role_permissions.role_id",
|
||
"fw_role_permissions.action",
|
||
"fw_role_permissions.`desc`",
|
||
"fw_role_permissions.create_time",
|
||
"fw_role_permissions.update_time",
|
||
"fw_role_permissions.delete_time",
|
||
"fw_role.title as role_title",
|
||
"fw_role.id as role_id",
|
||
})
|
||
select:where_i32("fw_role_permissions.id","=",id)
|
||
select:where_expression("AND fw_role_permissions.delete_time IS NULL")
|
||
select:limit(0,1)
|
||
local result = select:query()
|
||
if result:row_count() == 0 then
|
||
return nil
|
||
end
|
||
local d = result:table()[1]
|
||
return d
|
||
end
|
||
M.add = function(data,conn)
|
||
local insert = conn:insert()
|
||
insert:table("fw_role_permissions")
|
||
insert:set_str("path",data.path)
|
||
insert:set_i32("role_id",data.role_id)
|
||
if data.action ~= nil then
|
||
insert:set_str("action",data.action)
|
||
end
|
||
if data.desc ~= nil then
|
||
insert:set_str("`desc`",data.desc)
|
||
end
|
||
insert:set_not_ppst("create_time","NOW()")
|
||
local d = insert:exec()
|
||
return d == 1
|
||
end
|
||
M.update = function(data,conn)
|
||
local update = conn:update()
|
||
update:table("fw_role_permissions")
|
||
if data.path ~= nil then
|
||
update:set_str("path",data.path)
|
||
end
|
||
if data.action ~= nil then
|
||
update:set_str("action",data.action)
|
||
end
|
||
if data.desc ~= nil then
|
||
update:set_str("`desc`",data.desc)
|
||
end
|
||
if data.role_id ~= nil then
|
||
update:set_i32("role_id",data.role_id)
|
||
end
|
||
update:set("update_time=NOW()")
|
||
update:where_i32("id","=",data.id)
|
||
local d = update:exec()
|
||
return d == 1
|
||
end
|
||
M.delete = function(id,conn)
|
||
local update = conn:update()
|
||
update:table("fw_role_permissions")
|
||
update:set("delete_time=NOW()")
|
||
update:where_i32("id","=",id)
|
||
local d = update:exec()
|
||
return d == 1
|
||
end
|
||
M.list = function(search,limit,conn)
|
||
if search.role_id == -1 then
|
||
return {
|
||
count = 0,
|
||
data = {}
|
||
}
|
||
end
|
||
return query_model_ex(conn,[=[
|
||
fw_role_permissions LEFT JOIN fw_role ON fw_role_permissions.role_id = fw_role.id
|
||
]=],{
|
||
"fw_role_permissions.id",
|
||
"fw_role_permissions.path",
|
||
"fw_role_permissions.role_id",
|
||
"fw_role_permissions.action",
|
||
"fw_role_permissions.`desc`",
|
||
"fw_role_permissions.create_time",
|
||
"fw_role_permissions.update_time",
|
||
"fw_role_permissions.delete_time",
|
||
"fw_role.title as role_title",
|
||
"fw_role.id as role_id",
|
||
},limit.start,limit.length,function(sel)
|
||
|
||
if search.role_id ~= nil and search.role_id ~= 0 then
|
||
sel:where_i32("fw_role_permissions.role_id","=",search.role_id)
|
||
end
|
||
sel:where_expression("AND fw_role_permissions.delete_time IS NULL")
|
||
end,function(sel_data)
|
||
sel_data:orderby("fw_role_permissions.create_time DESC")
|
||
end)
|
||
end
|
||
-- 更新
|
||
M.make_bytecode = function(role_id,conn)
|
||
-- 查询权限表
|
||
local select = conn:select()
|
||
select:table("fw_role_permissions")
|
||
select:where_expression("AND delete_time IS NULL")
|
||
if role_id ~= nil then
|
||
select:where_i32("role_id", "=", role_id)
|
||
end
|
||
local result = select:query()
|
||
|
||
|
||
local bc = {}
|
||
|
||
while result:next() do
|
||
local id = result:get("id")
|
||
local path = result:get("path")
|
||
local role_id = tostring(result:get("role_id"))
|
||
local action = result:get("action")
|
||
local desc = result:get("desc")
|
||
local create_time = result:get("create_time")
|
||
local update_time = result:get("update_time")
|
||
local delete_time = result:get("delete_time")
|
||
-- local public = result:get("public")
|
||
|
||
if bc[role_id] == nil then
|
||
bc[role_id] = {}
|
||
end
|
||
if bc[role_id]["public"] == nil then
|
||
bc[role_id]["public"] = {}
|
||
end
|
||
if bc[role_id]["private"] == nil then
|
||
bc[role_id]["private"] = {}
|
||
end
|
||
-- 处理 action 字段，将其切分为表或空表
|
||
local actions_tbl = {}
|
||
if action and action ~= "" then
|
||
for act in string.gmatch(action, "([^,]+)") do
|
||
table.insert(actions_tbl, act)
|
||
end
|
||
end
|
||
|
||
local item = {
|
||
create_time = create_time,
|
||
update_time = update_time,
|
||
delete_time = delete_time,
|
||
action = actions_tbl,
|
||
desc = desc,
|
||
}
|
||
-- if public == 1 then
|
||
-- bc[role_id]["public"][path] = item
|
||
-- else
|
||
-- bc[role_id]["private"][path] = item
|
||
-- end
|
||
bc[role_id][path] = item
|
||
end
|
||
local code = "return " .. require("serpent").serialize(bc, {comment = false})
|
||
utils.save_file(fw.website_dir().."/"..(fwutils_config.path.luabytecode:gsub("%.", "/")).."/acl_bc.lua",code)
|
||
return true
|
||
end
|
||
-- 匹配
|
||
M.match = function(cfg)
|
||
|
||
local function match_path(path, patterns)
|
||
|
||
-- print("[match_path] path:",path)
|
||
for pattern, v in pairs(patterns) do
|
||
|
||
-- 如果是正则（以^开头），用string.match，否则精确匹配
|
||
if string.sub(pattern, 1, 1) == "^" then
|
||
|
||
if string.match(path, pattern) then
|
||
-- print("[TRUE] pattern:",pattern,",path:",path)
|
||
return true, v
|
||
-- else
|
||
-- print("[FALSE] pattern:",pattern,",path:",path)
|
||
end
|
||
else
|
||
if path == pattern then
|
||
return true, v
|
||
end
|
||
end
|
||
end
|
||
return false, nil
|
||
end
|
||
-- 检查action
|
||
local function check_action(actions,action)
|
||
if actions == nil or #actions == 0 then
|
||
return true
|
||
end
|
||
|
||
for _,v in pairs(actions) do
|
||
if v == action then
|
||
return true
|
||
end
|
||
end
|
||
return false, "action not match"
|
||
end
|
||
local role_id_str = string.format("%d",cfg.role_id())
|
||
local acl_bc = require(fwutils_config.path.luabytecode..".acl_bc")
|
||
if acl_bc[role_id_str] == nil then
|
||
return false,"role id("..role_id_str..") acl not found"
|
||
end
|
||
local result, item = match_path(cfg.filepath(), acl_bc[role_id_str])
|
||
if result then
|
||
return check_action(item.action,cfg.action())
|
||
end
|
||
return false,"path("..cfg.filepath()..") acl not found"
|
||
end
|
||
|
||
return M |