You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
319 lines
10 KiB
PHTML
319 lines
10 KiB
PHTML
2 years ago
|
<?php
|
||
|
|
// +----------------------------------------------------------------------
|
||
|
|
// | OneThink [ WE CAN DO IT JUST THINK IT ]
|
||
|
|
// +----------------------------------------------------------------------
|
||
|
|
// | Copyright (c) 2013 http://www.onethink.cn All rights reserved.
|
||
|
|
// +----------------------------------------------------------------------
|
||
|
|
// | Author: huajie <banhuajie@163.com>
|
||
|
|
// +----------------------------------------------------------------------
|
||
|
|
|
||
|
|
namespace Admin\Model;
|
||
|
|
use Think\Model;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 用户组模型类
|
||
|
|
* Class AuthGroupModel
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
class AuthGroupModel extends Model {
|
||
|
|
const TYPE_ADMIN = 1; // 管理员用户组类型标识
|
||
|
|
const MEMBER = 'member';
|
||
|
|
const UCENTER_MEMBER = 'ucenter_member';
|
||
|
|
const AUTH_GROUP_ACCESS = 'auth_group_access'; // 关系表表名
|
||
|
|
const AUTH_EXTEND = 'auth_extend'; // 动态权限扩展信息表
|
||
|
|
const AUTH_GROUP = 'auth_group'; // 用户组表名
|
||
|
|
const AUTH_EXTEND_CATEGORY_TYPE = 1; // 分类权限标识
|
||
|
|
const AUTH_EXTEND_MODEL_TYPE = 2; //分类权限标识
|
||
|
|
|
||
|
|
protected $_validate = array(
|
||
|
|
array('title','require', '必须设置用户组标题', Model::MUST_VALIDATE ,'regex',Model::MODEL_INSERT),
|
||
|
|
array('description','0,80', '描述最多80字符', Model::VALUE_VALIDATE , 'length' ,Model::MODEL_BOTH ),
|
||
|
|
);
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 返回用户组列表
|
||
|
|
* 默认返回正常状态的管理员用户组列表
|
||
|
|
* @param array $where 查询条件,供where()方法使用
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
public function getGroups($where=array()){
|
||
|
|
$map = array('status'=>1,'type'=>self::TYPE_ADMIN,'module'=>'admin');
|
||
|
|
$map = array_merge($map,$where);
|
||
|
|
return $this->where($map)->select();
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 把用户添加到用户组,支持批量添加用户到用户组
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*
|
||
|
|
* 示例: 把uid=1的用户添加到group_id为1,2的组 `AuthGroupModel->addToGroup(1,'1,2');`
|
||
|
|
*/
|
||
|
|
public function addToGroup($uid,$gid){
|
||
|
|
$uid = is_array($uid)?implode(',',$uid):trim($uid,',');
|
||
|
|
$gid = is_array($gid)?$gid:explode( ',',trim($gid,',') );
|
||
|
|
|
||
|
|
$Access = M(self::AUTH_GROUP_ACCESS);
|
||
|
|
if( isset($_REQUEST['batch']) ){
|
||
|
|
//为单个用户批量添加用户组时,先删除旧数据
|
||
|
|
$del = $Access->where( array('uid'=>array('in',$uid)) )->delete();
|
||
|
|
}
|
||
|
|
|
||
|
|
$uid_arr = explode(',',$uid);
|
||
|
|
$uid_arr = array_diff($uid_arr,array(C('USER_ADMINISTRATOR')));
|
||
|
|
$add = array();
|
||
|
|
if( $del!==false ){
|
||
|
|
foreach ($uid_arr as $u){
|
||
|
|
//判断用户id是否合法
|
||
|
|
if(M('Member')->getFieldByUid($u,'uid') == false){
|
||
|
|
$this->error = "编号为{$u}的账号不存在！";
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
foreach ($gid as $g){
|
||
|
|
if( is_numeric($u) && is_numeric($g) ){
|
||
|
|
$add[] = array('group_id'=>$g,'uid'=>$u);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$Access->addAll($add);
|
||
|
|
}
|
||
|
|
if ($Access->getDbError()) {
|
||
|
|
if( count($uid_arr)==1 && count($gid)==1 ){
|
||
|
|
//单个添加时定制错误提示
|
||
|
|
$this->error = "不能重复添加";
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}else{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 返回用户所属用户组信息
|
||
|
|
* @param int $uid 用户id
|
||
|
|
* @return array 用户所属的用户组 array(
|
||
|
|
* array('uid'=>'用户id','group_id'=>'用户组id','title'=>'用户组名称','rules'=>'用户组拥有的规则id,多个,号隔开'),
|
||
|
|
* ...)
|
||
|
|
*/
|
||
|
|
static public function getUserGroup($uid){
|
||
|
|
static $groups = array();
|
||
|
|
if (isset($groups[$uid]))
|
||
|
|
return $groups[$uid];
|
||
|
|
$prefix = C('DB_PREFIX');
|
||
|
|
$user_groups = M()
|
||
|
|
->field('uid,group_id,title,description,rules')
|
||
|
|
->table($prefix.self::AUTH_GROUP_ACCESS.' a')
|
||
|
|
->join ($prefix.self::AUTH_GROUP." g on a.group_id=g.id")
|
||
|
|
->where("a.uid='$uid' and g.status='1'")
|
||
|
|
->select();
|
||
|
|
$groups[$uid]=$user_groups?$user_groups:array();
|
||
|
|
return $groups[$uid];
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 返回用户拥有管理权限的扩展数据id列表
|
||
|
|
*
|
||
|
|
* @param int $uid 用户id
|
||
|
|
* @param int $type 扩展数据标识
|
||
|
|
* @param int $session 结果缓存标识
|
||
|
|
* @return array
|
||
|
|
*
|
||
|
|
* array(2,4,8,13)
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <xcoolcc@gmail.com>
|
||
|
|
*/
|
||
|
|
static public function getAuthExtend($uid,$type,$session){
|
||
|
|
if ( !$type ) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if ( $session ) {
|
||
|
|
$result = session($session);
|
||
|
|
}
|
||
|
|
if ( $uid == UID && !empty($result) ) {
|
||
|
|
return $result;
|
||
|
|
}
|
||
|
|
$prefix = C('DB_PREFIX');
|
||
|
|
$result = M()
|
||
|
|
->table($prefix.self::AUTH_GROUP_ACCESS.' g')
|
||
|
|
->join($prefix.self::AUTH_EXTEND.' c on g.group_id=c.group_id')
|
||
|
|
->where("g.uid='$uid' and c.type='$type' and !isnull(extend_id)")
|
||
|
|
->getfield('extend_id',true);
|
||
|
|
if ( $uid == UID && $session ) {
|
||
|
|
session($session,$result);
|
||
|
|
}
|
||
|
|
return $result;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 返回用户拥有管理权限的分类id列表
|
||
|
|
*
|
||
|
|
* @param int $uid 用户id
|
||
|
|
* @return array
|
||
|
|
*
|
||
|
|
* array(2,4,8,13)
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
static public function getAuthCategories($uid){
|
||
|
|
return self::getAuthExtend($uid,self::AUTH_EXTEND_CATEGORY_TYPE,'AUTH_CATEGORY');
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 获取用户组授权的扩展信息数据
|
||
|
|
*
|
||
|
|
* @param int $gid 用户组id
|
||
|
|
* @return array
|
||
|
|
*
|
||
|
|
* array(2,4,8,13)
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <xcoolcc@gmail.com>
|
||
|
|
*/
|
||
|
|
static public function getExtendOfGroup($gid,$type){
|
||
|
|
if ( !is_numeric($type) ) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
return M(self::AUTH_EXTEND)->where( array('group_id'=>$gid,'type'=>$type) )->getfield('extend_id',true);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 获取用户组授权的分类id列表
|
||
|
|
*
|
||
|
|
* @param int $gid 用户组id
|
||
|
|
* @return array
|
||
|
|
*
|
||
|
|
* array(2,4,8,13)
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
static public function getCategoryOfGroup($gid){
|
||
|
|
return self::getExtendOfGroup($gid,self::AUTH_EXTEND_CATEGORY_TYPE);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 批量设置用户组可管理的扩展权限数据
|
||
|
|
*
|
||
|
|
* @param int|string|array $gid 用户组id
|
||
|
|
* @param int|string|array $cid 分类id
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <xcoolcc@gmail.com>
|
||
|
|
*/
|
||
|
|
static public function addToExtend($gid,$cid,$type){
|
||
|
|
$gid = is_array($gid)?implode(',',$gid):trim($gid,',');
|
||
|
|
$cid = is_array($cid)?$cid:explode( ',',trim($cid,',') );
|
||
|
|
|
||
|
|
$Access = M(self::AUTH_EXTEND);
|
||
|
|
$del = $Access->where( array('group_id'=>array('in',$gid),'type'=>$type) )->delete();
|
||
|
|
|
||
|
|
$gid = explode(',',$gid);
|
||
|
|
$add = array();
|
||
|
|
if( $del!==false ){
|
||
|
|
foreach ($gid as $g){
|
||
|
|
foreach ($cid as $c){
|
||
|
|
if( is_numeric($g) && is_numeric($c) ){
|
||
|
|
$add[] = array('group_id'=>$g,'extend_id'=>$c,'type'=>$type);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$Access->addAll($add);
|
||
|
|
}
|
||
|
|
if ($Access->getDbError()) {
|
||
|
|
return false;
|
||
|
|
}else{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 批量设置用户组可管理的分类
|
||
|
|
*
|
||
|
|
* @param int|string|array $gid 用户组id
|
||
|
|
* @param int|string|array $cid 分类id
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
static public function addToCategory($gid,$cid){
|
||
|
|
return self::addToExtend($gid,$cid,self::AUTH_EXTEND_CATEGORY_TYPE);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 将用户从用户组中移除
|
||
|
|
* @param int|string|array $gid 用户组id
|
||
|
|
* @param int|string|array $cid 分类id
|
||
|
|
* @author 朱亚杰 <xcoolcc@gmail.com>
|
||
|
|
*/
|
||
|
|
public function removeFromGroup($uid,$gid){
|
||
|
|
return M(self::AUTH_GROUP_ACCESS)->where( array( 'uid'=>$uid,'group_id'=>$gid) )->delete();
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 获取某个用户组的用户列表
|
||
|
|
*
|
||
|
|
* @param int $group_id 用户组id
|
||
|
|
*
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
static public function memberInGroup($group_id){
|
||
|
|
$prefix = C('DB_PREFIX');
|
||
|
|
$l_table = $prefix.self::MEMBER;
|
||
|
|
$r_table = $prefix.self::AUTH_GROUP_ACCESS;
|
||
|
|
$r_table2 = $prefix.self::UCENTER_MEMBER;
|
||
|
|
$list = M() ->field('m.uid,u.username,m.last_login_time,m.last_login_ip,m.status')
|
||
|
|
->table($l_table.' m')
|
||
|
|
->join($r_table.' a ON m.uid=a.uid')
|
||
|
|
->join($r_table2.' u ON m.uid=u.id')
|
||
|
|
->where(array('a.group_id'=>$group_id))
|
||
|
|
->select();
|
||
|
|
return $list;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 检查id是否全部存在
|
||
|
|
* @param array|string $gid 用户组id列表
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
public function checkId($modelname,$mid,$msg = '以下id不存在:'){
|
||
|
|
if(is_array($mid)){
|
||
|
|
$count = count($mid);
|
||
|
|
$ids = implode(',',$mid);
|
||
|
|
}else{
|
||
|
|
$mid = explode(',',$mid);
|
||
|
|
$count = count($mid);
|
||
|
|
$ids = $mid;
|
||
|
|
}
|
||
|
|
|
||
|
|
$s = M($modelname)->where(array('id'=>array('IN',$ids)))->getField('id',true);
|
||
|
|
if(count($s)===$count){
|
||
|
|
return true;
|
||
|
|
}else{
|
||
|
|
$diff = implode(',',array_diff($mid,$s));
|
||
|
|
$this->error = $msg.$diff;
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 检查用户组是否全部存在
|
||
|
|
* @param array|string $gid 用户组id列表
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
public function checkGroupId($gid){
|
||
|
|
return $this->checkId('AuthGroup',$gid, '以下用户组id不存在:');
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 检查分类是否全部存在
|
||
|
|
* @param array|string $cid 栏目分类id列表
|
||
|
|
* @author 朱亚杰 <zhuyajie@topthink.net>
|
||
|
|
*/
|
||
|
|
public function checkCategoryId($cid){
|
||
|
|
return $this->checkId('Category',$cid, '以下分类id不存在:');
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
}
|
||
|
|
|