114 lines
3.2 KiB
PHP
114 lines
3.2 KiB
PHP
<?php
|
||
|
||
namespace admin\behaviors;
|
||
|
||
use Yii;
|
||
use yii\base\Controller;
|
||
use admin\models\Menu;
|
||
use yii\web\ForbiddenHttpException;
|
||
|
||
/**
|
||
* RbacBehavior是用于权限检查，这个更简单的是继承\yii\filters\AccessControl，为了练习写行为，这里就继承了\yii\base\Behavior
|
||
*
|
||
* To use RbacBehavior, declare it in the application config as behavior.
|
||
* For example.
|
||
*
|
||
* ~~~
|
||
* 'as rbac' => [
|
||
* 'class' => 'backend\behaviors\RbacBehavior',
|
||
* 'allowActions' => ['site/login', 'site/error']
|
||
* ]
|
||
* ~~~
|
||
*
|
||
*/
|
||
class RbacBehavior extends \yii\base\Behavior
|
||
{
|
||
|
||
/**
|
||
* @var array 无需权限检查的action
|
||
*/
|
||
public $allowActions = [];
|
||
|
||
/**
|
||
* ---------------------------------------
|
||
* 功能说明
|
||
* @return array
|
||
* ---------------------------------------
|
||
*/
|
||
public function events()
|
||
{
|
||
return [
|
||
Controller::EVENT_BEFORE_ACTION => 'rbacAction',
|
||
];
|
||
}
|
||
|
||
/**
|
||
* ---------------------------------------
|
||
* 控制器执行前的rbac处理
|
||
* @param $event \yii\base\ActionEvent 为什么是ActionEvent而不是Event，
|
||
* 因为yii/base/Controller第269行，事件参数是$event = new ActionEvent($action)
|
||
*
|
||
* 注意：ActionEvent::$isValid参数true/false分别表示继续执行或终止执行action，
|
||
* 所以验证成功后要$event->isValid = true，参考代码yii/base/Controller第152、270行
|
||
* @return boolean
|
||
* ---------------------------------------
|
||
*/
|
||
public function rbacAction($event){
|
||
$event->isValid = true; // 继续执行action
|
||
$action = $event->action;
|
||
$rule = $action->getUniqueId();
|
||
|
||
if($result = $this->commonCheck($rule)){
|
||
return $result;
|
||
};
|
||
//echo 'Access Denied';
|
||
$event->isValid = false; // 终止执行action
|
||
$this->denyAccess();
|
||
}
|
||
|
||
/**
|
||
* Denies the access of the user. HTTP 403 您没有执行此操作的权限
|
||
* The default implementation will redirect the user to the login page if he is a guest;
|
||
* if the user is already logged, a 403 HTTP exception will be thrown.
|
||
* @throws ForbiddenHttpException if the user is already logged in.
|
||
*/
|
||
protected function denyAccess()
|
||
{
|
||
if (\Yii::$app->user->getIsGuest()) {
|
||
\Yii::$app->user->loginRequired();
|
||
} else {
|
||
Yii::$app->user->logout();
|
||
throw new ForbiddenHttpException(Yii::t('yii', 'You are not allowed to perform this action.'));
|
||
}
|
||
}
|
||
|
||
public function commonCheck($rule)
|
||
{
|
||
foreach ($this->allowActions as $allow) {
|
||
//dump($rule); dump(rtrim($allow,'*')); echo '<br>';
|
||
if (substr($allow, -1) == '*') {
|
||
if (strpos($rule, rtrim($allow,'*')) === 0) {
|
||
return true;
|
||
}
|
||
} else {
|
||
if ($rule == $allow) {
|
||
return true;
|
||
}
|
||
}
|
||
}
|
||
if($rule == 'index/index'){
|
||
if(!\Yii::$app->user->getIsGuest()){
|
||
return true;
|
||
}
|
||
}else{
|
||
/* 权限检查 */
|
||
if ( Menu::checkRule($rule) ){
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
}
|
||
|
||
|
||
}
|