替换后台权限校验方式
parent
5c2500e7b3
commit
ba01477d9d
|
|
@ -0,0 +1,86 @@
|
|||
<?php
|
||||
|
||||
namespace App\Admin\Middleware;
|
||||
|
||||
use Closure;
|
||||
use Dcat\Admin\Admin;
|
||||
use Illuminate\Http\Request;
|
||||
use Dcat\Admin\Http\Middleware\Authenticate;
|
||||
use Dcat\Admin\Layout\Content;
|
||||
use Dcat\Admin\Support\Helper;
|
||||
|
||||
class Permissions
|
||||
{
|
||||
/**
|
||||
* Handle an incoming request.
|
||||
*
|
||||
* @param \Illuminate\Http\Request $request
|
||||
* @param \Closure $next
|
||||
* @return mixed
|
||||
*/
|
||||
public function handle(Request $request, Closure $next)
|
||||
{
|
||||
$routeName = $request->route()->getName();
|
||||
$user = Admin::user();
|
||||
|
||||
if (!$this->shouldPassThrough($request) //路由是否是白名单
|
||||
&& !$user?->hasPermission($routeName)//是否有权限
|
||||
) {
|
||||
if (Helper::isAjaxRequest()) {
|
||||
abort(403, trans('admin.deny'));
|
||||
}
|
||||
|
||||
admin_exit(
|
||||
Content::make()->withError(trans('admin.deny'))
|
||||
);
|
||||
}
|
||||
return $next($request);
|
||||
}
|
||||
|
||||
/**
|
||||
* @param \Illuminate\Http\Request $request
|
||||
*
|
||||
* @return bool
|
||||
*/
|
||||
protected function isApiRoute($request)
|
||||
{
|
||||
return $request->routeIs(admin_api_route_name('*'));
|
||||
}
|
||||
|
||||
/**
|
||||
* Determine if the request has a URI that should pass through verification.
|
||||
*
|
||||
* @param \Illuminate\Http\Request $request
|
||||
*
|
||||
* @return bool
|
||||
*/
|
||||
public function shouldPassThrough($request)
|
||||
{
|
||||
if ($this->isApiRoute($request) || Authenticate::shouldPassThrough($request)) {
|
||||
return true;
|
||||
}
|
||||
|
||||
$excepts = array_merge(
|
||||
(array) config('admin.permission.except', []),
|
||||
Admin::context()->getArray('permission.except')
|
||||
);
|
||||
|
||||
foreach ($excepts as $except) {
|
||||
if ($request->routeIs($except) || $request->routeIs(admin_route_name($except))) {
|
||||
return true;
|
||||
}
|
||||
|
||||
$except = admin_base_path($except);
|
||||
|
||||
if ($except !== '/') {
|
||||
$except = trim($except, '/');
|
||||
}
|
||||
|
||||
if (Helper::matchRequestPath($except)) {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
|
@ -63,5 +63,6 @@ class Kernel extends HttpKernel
|
|||
'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
|
||||
'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
|
||||
'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
|
||||
'admin.permissions' => \App\Admin\Middleware\Permissions::class,
|
||||
];
|
||||
}
|
||||
|
|
|
|||
|
|
@ -6,4 +6,57 @@ use Dcat\Admin\Models\Administrator as DcatAdministrator;
|
|||
|
||||
class Administrator extends DcatAdministrator
|
||||
{
|
||||
public function hasPermission(String $slug): bool
|
||||
{
|
||||
//判断是否是超级管理员
|
||||
if ($this->isAdministrator()) {
|
||||
return true;
|
||||
}
|
||||
|
||||
$userPermissions = $this->getCachePermissions();
|
||||
|
||||
//获取缓存权限
|
||||
if (!$userPermissions) {//未获取到则刷新
|
||||
$userPermissions = $this->refreshCachePermissions();
|
||||
}
|
||||
|
||||
//判断是否有权限
|
||||
if (in_array($slug, $userPermissions)) {
|
||||
return true;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
/**
|
||||
* 更新缓存权限:重新获取，并存入缓存
|
||||
*
|
||||
* @return array|null
|
||||
*/
|
||||
public function refreshCachePermissions(): ?array
|
||||
{
|
||||
//获取角色权限
|
||||
$permissions = [];
|
||||
foreach ($this->roles()->get() as $role) {
|
||||
if ($role->name !== 'Administrator') {
|
||||
foreach ($role->permissions as $permission) {
|
||||
$permissions[] = $permission->slug;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
//缓存权限
|
||||
session(['user_permissions' => $permissions]);
|
||||
|
||||
return $permissions;
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取缓存权限
|
||||
*
|
||||
* @return array|null
|
||||
*/
|
||||
public function getCachePermissions(): ?array
|
||||
{
|
||||
return session('user_permissions');
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -71,7 +71,7 @@ return [
|
|||
|
||||
'namespace' => 'App\\Admin\\Controllers',
|
||||
|
||||
'middleware' => ['web', 'admin'],
|
||||
'middleware' => ['web', 'admin.auth', 'admin.pjax', 'admin.bootstrap', 'admin.session', 'admin.upload', 'admin.permissions'],
|
||||
|
||||
'enable_session_middleware' => false,
|
||||
],
|
||||
|
|
@ -222,6 +222,7 @@ return [
|
|||
'auth/login',
|
||||
'auth/logout',
|
||||
'auth/setting',
|
||||
'dcat-api*',
|
||||
],
|
||||
],
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,107 @@
|
|||
<?php
|
||||
|
||||
namespace Database\Seeders;
|
||||
|
||||
use Illuminate\Database\Seeder;
|
||||
use Dcat\Admin\Models\Permission;
|
||||
use Illuminate\Support\Facades\DB;
|
||||
use Illuminate\Support\Facades\Log;
|
||||
|
||||
class AdminPermissionSeeder extends Seeder
|
||||
{
|
||||
/**
|
||||
* Run the database seeds.
|
||||
*
|
||||
* @return void
|
||||
*/
|
||||
public function run()
|
||||
{
|
||||
//
|
||||
$permissions = [
|
||||
/** 示例 **/
|
||||
// 'test'=> [
|
||||
// 'name' => '测试权限',
|
||||
// 'curd' => true, //true默认全部，false为不需要, ['index']为仅需要的
|
||||
// 'children' => [
|
||||
// 'show' => [
|
||||
// 'name' => '详情',
|
||||
// ],
|
||||
// ],
|
||||
// ],
|
||||
];
|
||||
try {
|
||||
DB::begintransaction();
|
||||
$this->createPermissionData($permissions);
|
||||
DB::commit();
|
||||
} catch (\Exception $e) {
|
||||
Log::error('权限录入：'.$e->getMessage());
|
||||
DB::rollBack();
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 插入权限
|
||||
*
|
||||
* @param array $permissions
|
||||
* @param string $key
|
||||
* @param integer $pId
|
||||
*/
|
||||
public function createPermissionData(array $permissions, string $key = '', int $pId = 0)
|
||||
{
|
||||
$curdArr = [
|
||||
'index'=>[
|
||||
'name' => '列表',
|
||||
],
|
||||
'create'=>[
|
||||
'name' => '新增',
|
||||
],
|
||||
'store' =>[
|
||||
'name' => '保存',
|
||||
],
|
||||
'edit' =>[
|
||||
'name' => '修改',
|
||||
],
|
||||
'update'=>[
|
||||
'name' => '更新',
|
||||
],
|
||||
'destroy'=>[
|
||||
'name' => '删除',
|
||||
],
|
||||
'show'=>[
|
||||
'name' => '详情',
|
||||
],
|
||||
];
|
||||
foreach ($permissions as $slug => $permission) {
|
||||
//是否已存在该权限
|
||||
$slugKey = 'dcat.admin.'.($key ? $key.'.'.$slug : $slug);
|
||||
if (!$pper = Permission::where('slug', $slugKey)->first()) {
|
||||
$pper = Permission::create([
|
||||
'name' => $permission['name'],
|
||||
'slug' => $slugKey,
|
||||
'parent_id' => $pId,
|
||||
]);
|
||||
} else {
|
||||
$pper->update([
|
||||
'name' => $permission['name'],
|
||||
]);
|
||||
}
|
||||
|
||||
if (!isset($permission['children'])) {
|
||||
$permission['children'] = [];
|
||||
}
|
||||
//判断是否默认插入curd权限
|
||||
if (isset($permission['curd']) && $permission['curd']) {
|
||||
if (is_array($permission['curd'])) {
|
||||
foreach ($permission['curd'] as $value) {
|
||||
$permission['children'][$value] = $curdArr[$value];
|
||||
}
|
||||
} else {
|
||||
$permission['children'] = array_merge($curdArr, $permission['children']);
|
||||
}
|
||||
}
|
||||
if (count($permission['children']) > 0) {
|
||||
$this->createPermissionData($permission['children'], $key ? $key.'.'.$slug : $slug, $pper->id);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Reference in New Issue