114 lines
3.2 KiB
PHP
114 lines
3.2 KiB
PHP
|
<?php
|
|||
|
|
|
|||
|
|
namespace admin\behaviors;
|
|||
|
|
|
|||
|
|
use Yii;
|
|||
|
|
use yii\base\Controller;
|
|||
|
|
use admin\models\Menu;
|
|||
|
|
use yii\web\ForbiddenHttpException;
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* RbacBehavior是用于权限检查，这个更简单的是继承\yii\filters\AccessControl，为了练习写行为，这里就继承了\yii\base\Behavior
|
|||
|
|
*
|
|||
|
|
* To use RbacBehavior, declare it in the application config as behavior.
|
|||
|
|
* For example.
|
|||
|
|
*
|
|||
|
|
* ~~~
|
|||
|
|
* 'as rbac' => [
|
|||
|
|
* 'class' => 'backend\behaviors\RbacBehavior',
|
|||
|
|
* 'allowActions' => ['site/login', 'site/error']
|
|||
|
|
* ]
|
|||
|
|
* ~~~
|
|||
|
|
*
|
|||
|
|
*/
|
|||
|
|
class RbacBehavior extends \yii\base\Behavior
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @var array 无需权限检查的action
|
|||
|
|
*/
|
|||
|
|
public $allowActions = [];
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* ---------------------------------------
|
|||
|
|
* 功能说明
|
|||
|
|
* @return array
|
|||
|
|
* ---------------------------------------
|
|||
|
|
*/
|
|||
|
|
public function events()
|
|||
|
|
{
|
|||
|
|
return [
|
|||
|
|
Controller::EVENT_BEFORE_ACTION => 'rbacAction',
|
|||
|
|
];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* ---------------------------------------
|
|||
|
|
* 控制器执行前的rbac处理
|
|||
|
|
* @param $event \yii\base\ActionEvent 为什么是ActionEvent而不是Event，
|
|||
|
|
* 因为yii/base/Controller第269行，事件参数是$event = new ActionEvent($action)
|
|||
|
|
*
|
|||
|
|
* 注意：ActionEvent::$isValid参数true/false分别表示继续执行或终止执行action，
|
|||
|
|
* 所以验证成功后要$event->isValid = true，参考代码yii/base/Controller第152、270行
|
|||
|
|
* @return boolean
|
|||
|
|
* ---------------------------------------
|
|||
|
|
*/
|
|||
|
|
public function rbacAction($event){
|
|||
|
|
$event->isValid = true; // 继续执行action
|
|||
|
|
$action = $event->action;
|
|||
|
|
$rule = $action->getUniqueId();
|
|||
|
|
|
|||
|
|
if($result = $this->commonCheck($rule)){
|
|||
|
|
return $result;
|
|||
|
|
};
|
|||
|
|
//echo 'Access Denied';
|
|||
|
|
$event->isValid = false; // 终止执行action
|
|||
|
|
$this->denyAccess();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* Denies the access of the user. HTTP 403 您没有执行此操作的权限
|
|||
|
|
* The default implementation will redirect the user to the login page if he is a guest;
|
|||
|
|
* if the user is already logged, a 403 HTTP exception will be thrown.
|
|||
|
|
* @throws ForbiddenHttpException if the user is already logged in.
|
|||
|
|
*/
|
|||
|
|
protected function denyAccess()
|
|||
|
|
{
|
|||
|
|
if (\Yii::$app->user->getIsGuest()) {
|
|||
|
|
\Yii::$app->user->loginRequired();
|
|||
|
|
} else {
|
|||
|
|
Yii::$app->user->logout();
|
|||
|
|
throw new ForbiddenHttpException(Yii::t('yii', 'You are not allowed to perform this action.'));
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function commonCheck($rule)
|
|||
|
|
{
|
|||
|
|
foreach ($this->allowActions as $allow) {
|
|||
|
|
//dump($rule); dump(rtrim($allow,'*')); echo '<br>';
|
|||
|
|
if (substr($allow, -1) == '*') {
|
|||
|
|
if (strpos($rule, rtrim($allow,'*')) === 0) {
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
} else {
|
|||
|
|
if ($rule == $allow) {
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if($rule == 'index/index'){
|
|||
|
|
if(!\Yii::$app->user->getIsGuest()){
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
}else{
|
|||
|
|
/* 权限检查 */
|
|||
|
|
if ( Menu::checkRule($rule) ){
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
}
|