Repository navigation
Expand file tree
/
Copy pathaccess.go
More file actions
executable file
·74 lines (56 loc) · 1.85 KB
/
Copy pathaccess.go
File metadata and controls
executable file
·74 lines (56 loc) · 1.85 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
package config
import (
"context"
"github.com/glennliao/apijson-go/consts"
"github.com/gogf/gf/v2/frame/g"
"github.com/samber/lo"
)
type ConditionReq struct {
AccessName string // _access 中的alias
TableAccessRoleList []string
Method string
NodeReq g.Map // 节点的请求数据
NodeRole string // 节点的角色
}
type AccessCondition func(ctx context.Context, req ConditionReq, condition *ConditionRet) error
type RoleReq struct {
AccessName string
Method string
NodeRole string // 前端传入的节点的角色, 目前未传入则为空
}
type DefaultRole func(ctx context.Context, req RoleReq) (string, error)
func defaultRole(ctx context.Context, req RoleReq) (string, error) {
return consts.UNKNOWN, nil
}
func defaultCondition(ctx context.Context, req ConditionReq, condition *ConditionRet) error {
return nil
}
type Access struct {
// 禁用_access权限校验, 默认为false, 需手动开启
NoVerify bool
// 用于 根据accessName+user来自定义添加sql条件, 完成数据的权限限制
ConditionFunc AccessCondition
// nodeRole 为前端显式指定的role, 需要此函数中判断该role是不是用户角色之一, 返回最终该节点的角色
DefaultRoleFunc DefaultRole
roleList []string
accessConfigMap map[string]AccessConfig
}
func NewAccess() *Access {
// fixme 统一access字段名大小写问题
// fixme
a := &Access{}
a.ConditionFunc = defaultCondition
a.DefaultRoleFunc = defaultRole
a.roleList = []string{consts.UNKNOWN, consts.LOGIN, consts.OWNER, consts.ADMIN}
return a
}
// AddRole 添加应用中额外的角色
func (a *Access) AddRole(roles []string) *Access {
for _, role := range roles {
if !lo.Contains(a.roleList, role) {
a.roleList = append(a.roleList, role)
}
}
return a
}
func (a *Access) RoleList() []string { return a.roleList }