You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
502 lines
18 KiB
PHP
502 lines
18 KiB
PHP
<?php
|
|
// +----------------------------------------------------------------------
|
|
// | OneThink [ WE CAN DO IT JUST THINK IT ]
|
|
// +----------------------------------------------------------------------
|
|
// | Copyright (c) 2013 http://www.onethink.cn All rights reserved.
|
|
// +----------------------------------------------------------------------
|
|
// | Author: 朱亚杰 <zhuyajie@topthink.net>
|
|
// +----------------------------------------------------------------------
|
|
|
|
namespace Admin\Controller;
|
|
use Admin\Model\AuthRuleModel;
|
|
use Admin\Model\AuthGroupModel;
|
|
|
|
/**
|
|
* 权限管理控制器
|
|
* Class AuthManagerController
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
class AuthManagerController extends AdminController{
|
|
|
|
/**
|
|
* 后台节点配置的url作为规则存入auth_rule
|
|
* 执行新节点的插入,已有节点的更新,无效规则的删除三项任务
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function updateRules(){
|
|
//需要新增的节点必然位于$nodes
|
|
$nodes = $this->returnNodes(false);
|
|
|
|
$AuthRule = M('AuthRule');
|
|
$map = array('module'=>'admin','type'=>array('in','1,2'));//status全部取出,以进行更新
|
|
//需要更新和删除的节点必然位于$rules
|
|
$rules = $AuthRule->where($map)->order('name')->select();
|
|
|
|
//构建insert数据
|
|
$data = array();//保存需要插入和更新的新节点
|
|
foreach ($nodes as $value){
|
|
$temp['name'] = $value['url'];
|
|
$temp['title'] = $value['title'];
|
|
$temp['module'] = 'admin';
|
|
if($value['pid'] >0){
|
|
$temp['type'] = AuthRuleModel::RULE_URL;
|
|
}else{
|
|
$temp['type'] = AuthRuleModel::RULE_MAIN;
|
|
}
|
|
$temp['status'] = 1;
|
|
$data[strtolower($temp['name'].$temp['module'].$temp['type'])] = $temp;//去除重复项
|
|
}
|
|
|
|
$update = array();//保存需要更新的节点
|
|
$ids = array();//保存需要删除的节点的id
|
|
foreach ($rules as $index=>$rule){
|
|
$key = strtolower($rule['name'].$rule['module'].$rule['type']);
|
|
if ( isset($data[$key]) ) {//如果数据库中的规则与配置的节点匹配,说明是需要更新的节点
|
|
$data[$key]['id'] = $rule['id'];//为需要更新的节点补充id值
|
|
$update[] = $data[$key];
|
|
unset($data[$key]);
|
|
unset($rules[$index]);
|
|
unset($rule['condition']);
|
|
$diff[$rule['id']]=$rule;
|
|
}elseif($rule['status']==1){
|
|
$ids[] = $rule['id'];
|
|
}
|
|
}
|
|
if ( count($update) ) {
|
|
foreach ($update as $k=>$row){
|
|
if ( $row!=$diff[$row['id']] ) {
|
|
$AuthRule->where(array('id'=>$row['id']))->save($row);
|
|
}
|
|
}
|
|
}
|
|
if ( count($ids) ) {
|
|
$AuthRule->where( array( 'id'=>array('IN',implode(',',$ids)) ) )->save(array('status'=>-1));
|
|
//删除规则是否需要从每个用户组的访问授权表中移除该规则?
|
|
}
|
|
if( count($data) ){
|
|
$AuthRule->addAll(array_values($data));
|
|
}
|
|
if ( $AuthRule->getDbError() ) {
|
|
trace('['.__METHOD__.']:'.$AuthRule->getDbError());
|
|
return false;
|
|
}else{
|
|
return true;
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* 权限管理首页
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function index(){
|
|
$list = $this->lists('AuthGroup',array('module'=>'admin'),'id asc');
|
|
$list = int_to_string($list);
|
|
$this->assign( '_list', $list );
|
|
$this->assign( '_use_tip', true );
|
|
$this->meta_title = '权限管理';
|
|
|
|
|
|
$this->m_title = '角色权限';
|
|
$this->assign('commonset',M('Kuaijieicon')->where(['url'=>'AuthManager/index','status'=>1])->find());
|
|
|
|
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 创建管理员用户组
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function createGroup(){
|
|
if ( empty($this->auth_group) ) {
|
|
$this->assign('auth_group',array('title'=>null,'id'=>null,'description'=>null,'rules'=>null,));//排除notice信息
|
|
}
|
|
$this->meta_title = '新增用户组';
|
|
|
|
|
|
$this->m_title = '角色权限';
|
|
$this->assign('commonset',M('Kuaijieicon')->where(['url'=>'AuthManager/index','status'=>1])->find());
|
|
|
|
|
|
$this->display('editgroup');
|
|
}
|
|
|
|
/**
|
|
* 编辑管理员用户组
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function editGroup(){
|
|
$auth_group = M('AuthGroup')->where( array('module'=>'admin','type'=>AuthGroupModel::TYPE_ADMIN) )
|
|
->find( (int)$_GET['id'] );
|
|
$this->assign('auth_group',$auth_group);
|
|
$this->meta_title = '编辑用户组';
|
|
|
|
$this->m_title = '角色权限';
|
|
$this->assign('commonset',M('Kuaijieicon')->where(['url'=>'AuthManager/index','status'=>1])->find());
|
|
|
|
|
|
$this->display();
|
|
}
|
|
|
|
|
|
/**
|
|
* 访问授权页面
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function access(){
|
|
$this->updateRules();
|
|
$auth_group = M('AuthGroup')->where( array('status'=>array('egt','0'),'module'=>'admin','type'=>AuthGroupModel::TYPE_ADMIN) )
|
|
->getfield('id,id,title,rules');
|
|
$node_list = $this->returnNodes();
|
|
$map = array('module'=>'admin','type'=>AuthRuleModel::RULE_MAIN,'status'=>1);
|
|
$main_rules = M('AuthRule')->where($map)->getField('name,id');
|
|
$map = array('module'=>'admin','type'=>AuthRuleModel::RULE_URL,'status'=>1);
|
|
$child_rules = M('AuthRule')->where($map)->getField('name,id');
|
|
|
|
$this->assign('main_rules', $main_rules);
|
|
$this->assign('auth_rules', $child_rules);
|
|
$this->assign('node_list', $node_list);
|
|
$this->assign('auth_group', $auth_group);
|
|
$this->assign('this_group', $auth_group[(int)$_GET['group_id']]);
|
|
$this->meta_title = '访问授权';
|
|
|
|
$this->m_title = '角色权限';
|
|
$this->assign('commonset',M('Kuaijieicon')->where(['url'=>'AuthManager/index','status'=>1])->find());
|
|
|
|
|
|
|
|
$this->display('managergroup');
|
|
}
|
|
|
|
/**
|
|
* 管理员用户组数据写入/更新
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function writeGroup(){
|
|
foreach ($_POST['rules'] as $key => $value) {
|
|
if(stripos($value,"_forthird")!==false){
|
|
$thirdrule[] = rtrim($value,"_forthird");
|
|
$_POST['rules'][$key] = rtrim($value,"_forthird");
|
|
}
|
|
}
|
|
if(!empty($thirdrule)){
|
|
$ruledata = M('AuthRule')->field('id,name')->where(['id'=>['in',$thirdrule]])->select();
|
|
foreach ($ruledata as $k1 => &$v1) {
|
|
if( stripos($v1['name'],MODULE_NAME)===0 ){
|
|
$v1['name'] = substr($v1['name'],6);
|
|
}
|
|
}
|
|
if(!empty($ruledata)){
|
|
$rulename = array_column($ruledata,'name');
|
|
$menuerji = M('Menu')->where(['url'=>['in',$rulename]])->getField('id',true);
|
|
$menudata = M('Menu')->field('id,url')->where(['pid'=>['in',$menuerji]])->select();
|
|
foreach ($menudata as $k2 => &$v2) {
|
|
if( stripos($v2['url'],MODULE_NAME)!==0 ){
|
|
$v2['url'] = MODULE_NAME.'/'.$v2['url'];
|
|
}
|
|
}
|
|
$menuurl = array_column($menudata,'url');
|
|
if(!empty($menuurl)){
|
|
$ruleiddata = array_unique(M('AuthRule')->where(['name'=>['in',$menuurl]])->getField('id',true));
|
|
// dump(M('AuthRule')->getlastsql());exit;
|
|
}
|
|
}
|
|
}
|
|
if(isset($_POST['rules'])){
|
|
if(!empty($ruleiddata)){
|
|
$_POST['rules'] = array_merge($_POST['rules'],$ruleiddata);
|
|
}
|
|
sort($_POST['rules']);
|
|
$_POST['rules'] = implode( ',' , array_unique($_POST['rules']));
|
|
}else{
|
|
$_POST['rules'] = '';
|
|
}
|
|
$_POST['module'] = 'admin';
|
|
$_POST['type'] = AuthGroupModel::TYPE_ADMIN;
|
|
$AuthGroup = D('AuthGroup');
|
|
$data = $AuthGroup->create();
|
|
if ( $data ) {
|
|
if ( empty($data['id']) ) {
|
|
\Think\Log::actionLog('AuthManager/createGroup','authGroup',1);
|
|
$r = $AuthGroup->add();
|
|
}else{
|
|
\Think\Log::actionLog('AuthManager/editGroup','authGroup',1);
|
|
$r = $AuthGroup->save();
|
|
}
|
|
if($r===false){
|
|
$this->error('操作失败'.$AuthGroup->getError());
|
|
} else{
|
|
$this->success('操作成功!',U('index'));
|
|
}
|
|
}else{
|
|
$this->error('操作失败'.$AuthGroup->getError());
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 状态修改
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function changeStatus($method=null){
|
|
if ( empty($_REQUEST['id']) ) {
|
|
$this->error('请选择要操作的数据!');
|
|
}
|
|
switch ( strtolower($method) ){
|
|
case 'forbidgroup':
|
|
\Think\Log::actionLog('AuthManager/changeStatus?method=forbidGroup','AuthGroup',$_REQUEST['id']);
|
|
$this->forbid('AuthGroup');
|
|
break;
|
|
case 'resumegroup':
|
|
\Think\Log::actionLog('AuthManager/changeStatus?method=resumegroup','AuthGroup',$_REQUEST['id']);
|
|
$this->resume('AuthGroup');
|
|
break;
|
|
case 'deletegroup':
|
|
\Think\Log::actionLog('AuthManager/changeStatus?method=deletegroup','AuthGroup',$_REQUEST['id']);
|
|
$this->delete('AuthGroup');
|
|
break;
|
|
default:
|
|
$this->error($method.'参数非法');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 用户组授权用户列表
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function user($group_id){
|
|
if(empty($group_id)){
|
|
$this->error('参数错误');
|
|
}
|
|
|
|
$auth_group = M('AuthGroup')->where( array('status'=>array('egt','0'),'module'=>'admin','type'=>AuthGroupModel::TYPE_ADMIN) )
|
|
->getfield('id,id,title,rules');
|
|
$prefix = C('DB_PREFIX');
|
|
$l_table = $prefix.(AuthGroupModel::MEMBER);
|
|
$r_table = $prefix.(AuthGroupModel::AUTH_GROUP_ACCESS);
|
|
$model = M()->table( $l_table.' m' )->join ( $r_table.' a ON m.uid=a.uid' );
|
|
$_REQUEST = array();
|
|
$list = $this->lists($model,array('a.group_id'=>$group_id,'m.status'=>array('egt',0)),'m.uid asc','m.uid,m.nickname,m.last_login_time,m.last_login_ip,m.status');
|
|
int_to_string($list);
|
|
$this->assign( '_list', $list );
|
|
$this->assign('auth_group', $auth_group);
|
|
$this->assign('this_group', $auth_group[(int)$_GET['group_id']]);
|
|
$this->meta_title = '成员授权';
|
|
|
|
$this->m_title = '角色权限';
|
|
$this->assign('commonset',M('Kuaijieicon')->where(['url'=>'AuthManager/index','status'=>1])->find());
|
|
|
|
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 将分类添加到用户组的编辑页面
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function category(){
|
|
$auth_group = M('AuthGroup')->where( array('status'=>array('egt','0'),'module'=>'admin','type'=>AuthGroupModel::TYPE_ADMIN) )
|
|
->getfield('id,id,title,rules');
|
|
$group_list = D('Category')->getTree();
|
|
$authed_group = AuthGroupModel::getCategoryOfGroup(I('group_id'));
|
|
$this->assign('authed_group', implode(',',(array)$authed_group));
|
|
$this->assign('group_list', $group_list);
|
|
$this->assign('auth_group', $auth_group);
|
|
$this->assign('this_group', $auth_group[(int)$_GET['group_id']]);
|
|
$this->meta_title = '分类授权';
|
|
|
|
$this->m_title = '角色权限';
|
|
$this->assign('commonset',M('Kuaijieicon')->where(['url'=>'AuthManager/index','status'=>1])->find());
|
|
|
|
$this->display();
|
|
}
|
|
|
|
public function tree($tree = null){
|
|
$this->assign('tree', $tree);
|
|
$this->display('tree');
|
|
}
|
|
|
|
/**
|
|
* 将用户添加到用户组的编辑页面
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function group(){
|
|
$uid = I('uid');
|
|
$auth_groups = D('AuthGroup')->getGroups();
|
|
$user_groups = AuthGroupModel::getUserGroup($uid);
|
|
$ids = array();
|
|
foreach ($user_groups as $value){
|
|
$ids[] = $value['group_id'];
|
|
}
|
|
$nickname = D('Member')->getNickName($uid);
|
|
$this->assign('nickname', $nickname);
|
|
$this->assign('auth_groups',$auth_groups);
|
|
$this->assign('user_groups',implode(',',$ids));
|
|
$this->meta_title = '用户组授权';
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 将用户添加到用户组,入参uid,group_id
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function addToGroup(){
|
|
$uid = I('uid');
|
|
$gid = I('group_id');
|
|
if( empty($uid) ){
|
|
$this->error('参数有误');
|
|
}
|
|
$AuthGroup = D('AuthGroup');
|
|
if(is_numeric($uid)){
|
|
if ( is_administrator($uid) ) {
|
|
$this->error('该用户为超级管理员');
|
|
}
|
|
if( !M('Member')->where(array('uid'=>$uid))->find() ){
|
|
$this->error('账号不存在');
|
|
}
|
|
}
|
|
|
|
if( $gid && !$AuthGroup->checkGroupId($gid)){
|
|
$this->error($AuthGroup->error);
|
|
}
|
|
if ( $AuthGroup->addToGroup($uid,$gid) ){
|
|
$this->success('操作成功');
|
|
}else{
|
|
$this->error($AuthGroup->getError());
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 将用户从用户组中移除 入参:uid,group_id
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function removeFromGroup(){
|
|
$uid = I('uid');
|
|
$gid = I('group_id');
|
|
if( $uid==UID ){
|
|
$this->error('不允许解除自身授权');
|
|
}
|
|
if( empty($uid) || empty($gid) ){
|
|
$this->error('参数有误');
|
|
}
|
|
$AuthGroup = D('AuthGroup');
|
|
if( !$AuthGroup->find($gid)){
|
|
$this->error('用户组不存在');
|
|
}
|
|
if ( $AuthGroup->removeFromGroup($uid,$gid) ){
|
|
$this->success('操作成功');
|
|
}else{
|
|
$this->error('操作失败');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 将分类添加到用户组 入参:cid,group_id
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
|
*/
|
|
public function addToCategory(){
|
|
$cid = I('cid');
|
|
$gid = I('group_id');
|
|
if( empty($gid) ){
|
|
$this->error('参数有误');
|
|
}
|
|
$AuthGroup = D('AuthGroup');
|
|
if( !$AuthGroup->find($gid)){
|
|
$this->error('用户组不存在');
|
|
}
|
|
if( $cid && !$AuthGroup->checkCategoryId($cid)){
|
|
$this->error($AuthGroup->error);
|
|
}
|
|
if ( $AuthGroup->addToCategory($gid,$cid) ){
|
|
$this->success('操作成功',U('index'));
|
|
}else{
|
|
$this->error('操作失败');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 将模型添加到用户组 入参:mid,group_id
|
|
* @author 朱亚杰 <xcoolcc@gmail.com>
|
|
*/
|
|
public function addToModel(){
|
|
$mid = I('id');
|
|
$gid = I('get.group_id');
|
|
if( empty($gid) ){
|
|
$this->error('参数有误');
|
|
}
|
|
$AuthGroup = D('AuthGroup');
|
|
if( !$AuthGroup->find($gid)){
|
|
$this->error('用户组不存在');
|
|
}
|
|
if( $mid && !$AuthGroup->checkModelId($mid)){
|
|
$this->error($AuthGroup->error);
|
|
}
|
|
if ( $AuthGroup->addToModel($gid,$mid) ){
|
|
$this->success('操作成功');
|
|
}else{
|
|
$this->error('操作失败');
|
|
}
|
|
}
|
|
|
|
public function dataempower() {
|
|
|
|
$auth_group = M('AuthGroup')->where( array('status'=>array('egt','0'),'module'=>'admin','type'=>AuthGroupModel::TYPE_ADMIN) )
|
|
->getfield('id,id,title,rules');
|
|
// var_dump($auth_group);die();
|
|
$empower_type = M('AuthGroup')->field('data_empower_type')->where(array('id'=>$_GET['group_id']))->find();
|
|
// var_dump($empower_type);die();
|
|
$this->assign('data_empower_type', $empower_type['data_empower_type']);
|
|
$this->assign('auth_group', $auth_group);
|
|
$this->display();
|
|
|
|
}
|
|
|
|
public function dataEmpowerSave() {
|
|
$mid = I('id');
|
|
$gid = I('group_id');
|
|
$data_empower_type = I('data_empower_type');
|
|
$promoteData = I('promote_data');
|
|
|
|
// dump(json_decode($promoteData,true));
|
|
// var_dump($promoteData);die();
|
|
// str_replace("'valuie'","'id'");
|
|
|
|
if( empty($gid)||empty($data_empower_type) ){
|
|
$this->error('参数有误');
|
|
}
|
|
$AuthGroup = D('AuthGroup');
|
|
if( !$AuthGroup->find($gid)){
|
|
$this->error('用户组不存在');
|
|
}
|
|
|
|
if( $mid && !$AuthGroup->checkModelId($mid)){
|
|
$this->error($AuthGroup->error);
|
|
}
|
|
|
|
if ($data_empower_type == 2) {
|
|
$promoteData = implode(',',array_column(json_decode($promoteData,true),'value'));
|
|
} else {
|
|
$promoteData = '';
|
|
}
|
|
|
|
if ($AuthGroup->where("id = {$gid}")->save(array('data_empower_type'=>$data_empower_type,'data_president'=>$promoteData))) {
|
|
$this->success('操作成功',U('AuthManager/index'));
|
|
} else {
|
|
$this->success('操作成功',U('AuthManager/index'));
|
|
}
|
|
|
|
}
|
|
|
|
function getRootPromote() {
|
|
$promoteData = M('promote','tab_')->field('id as value,account as title')->where(array('level'=>1,'chain'=>'/'))->select();
|
|
$data_president = M('AuthGroup')->field('data_president')->where(array('id'=>$_REQUEST['group_id']))->find();
|
|
|
|
$promoteData = array_merge([0=>['value'=>'-1','title'=>'官方渠道']],$promoteData);
|
|
|
|
$returnData = array('data_president'=>$data_president['data_president'],'list'=>$promoteData);
|
|
|
|
$this->ajaxReturn(json_encode($returnData));
|
|
}
|
|
|
|
}
|