mirror of
https://gitee.com/ShopeX/OMS
synced 2026-03-23 02:45:33 +08:00
79 lines
2.5 KiB
PHP
79 lines
2.5 KiB
PHP
<?php
|
||
/**
|
||
* Copyright 2012-2026 ShopeX (https://www.shopex.cn)
|
||
*
|
||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
* you may not use this file except in compliance with the License.
|
||
* You may obtain a copy of the License at
|
||
*
|
||
* http://www.apache.org/licenses/LICENSE-2.0
|
||
*
|
||
* Unless required by applicable law or agreed to in writing, software
|
||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
* See the License for the specific language governing permissions and
|
||
* limitations under the License.
|
||
*/
|
||
|
||
class ome_mdl_roles extends dbeav_model{
|
||
|
||
/**
|
||
* 获取当前用户的权限
|
||
*
|
||
* @return $acts
|
||
*/
|
||
function getUserroles()
|
||
{
|
||
//如果是超级管理员，则返回->get_name()
|
||
if (kernel::single('desktop_user')->is_super())
|
||
{
|
||
return array('is_super' => true);
|
||
}
|
||
$usr_permissions = $this->getPermissions(kernel::single('desktop_user')->has_roles());
|
||
$return = array();
|
||
foreach ($usr_permissions as $permission)
|
||
{
|
||
$return = array_merge($return,$this->getactroles($permission));
|
||
}
|
||
return $return;
|
||
}
|
||
|
||
function get_all_permits()
|
||
{
|
||
$record_roles = $this->db->select("SELECT * from sdb_ome_roles where disabled='false'");
|
||
foreach ($record_roles as $onerole)
|
||
{
|
||
$return[$onerole['role']][$onerole['permission']] = true;
|
||
}
|
||
return $return;
|
||
}
|
||
|
||
//通过role获得permission，这个函数应该是系统提供的
|
||
function getPermissions($roles)
|
||
{
|
||
//角色与permission的对应关系。
|
||
$return = array();
|
||
$record_roles = $this->db->select("SELECT * from sdb_ome_roles where disabled='false' and `role` in (".implode(',',$roles).")");
|
||
foreach ($record_roles as $onerecord)
|
||
{
|
||
$return[] = $onerecord['permission'];
|
||
}
|
||
$return = array_unique($return);
|
||
return $return;
|
||
}
|
||
|
||
//返回每一个角色对应本App的可操作权限。
|
||
function getactroles($permission)
|
||
{
|
||
//每个permission与本App的可操作权限对应关系。
|
||
//这是每个App自己管理的权限。
|
||
$return = array();
|
||
$record_roles = $this->db->select("SELECT * from sdb_ome_role_acts where disabled='false' and `permission` = '$permission'");
|
||
foreach ($record_roles as $oneact)
|
||
{
|
||
$return[] = $oneact['act'];
|
||
}
|
||
return $return;
|
||
}
|
||
}
|
||
?>
|