【微电影】---基于角色的访问控制

绝地灬酷狼 2022-12-23 03:55 174阅读 0赞

# 前言 #

基于角色的访问控制

--------------------

# 权限管理 #

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center]

*  创建form表单接收对象

class AuthForm(FlaskForm):
        name = StringField(
            label='权限名称',
            validators=[
                DataRequired('请输入权限名称！')
            ],
            description='权限名称',
            render_kw={ 
                'class': 'form-control',
                'placeholder': '请输入权限名称！'
            }
        )
        url = StringField(
            label='权限地址',
            validators=[
                DataRequired('请输入权限地址！')
            ],
            description='权限地址',
            render_kw={ 
                'class':'form-control',
                'placeholder': '请输入权限地址！'
            }
        )
        submit = SubmitField(
            '编辑',
            render_kw={ 
                'class': 'btn btn-primary',
            }
        )

*  编写接口API

# 权限添加
    @admin.route('/auth/add', methods=['GET', 'POST'])
    def auth_add():
        form = AuthForm()
        if form.validate_on_submit():
            data = form.data
            auth = Auth(
                name=data['name'],
                url=data['url']
            )
            db.session.add(auth)
            db.session.commit()
            flash('添加权限成功！', 'ok')
        return render_template('admin/auth_add.html', form=form)
    # 权限列表
    @admin.route('/auth/list/<int:page>/', methods=['GET'])
    @admin_login_req
    def auth_list(page=None):
        if page is None:
            page = 1
        page_data = Auth.query.order_by(
            Auth.addtime.desc()
        ).paginate(page=page, per_page=10)
        return render_template('admin/auth_list.html', page_data=page_data)
    
    
    # 权限删除
    @admin.route('/auth/del/<int:id>', methods=['GET'])
    @admin_login_req
    def auth_del(id=None):
        auth = Auth.query.filter_by(id=id).first_or_404()
        db.session.delete(auth)
        db.session.commit()
        flash('删除权限成功', 'OK')
        return redirect(url_for('admin.auth_list', page=1))
    
    # 编辑权限
    @admin.route('/auth/edit/<int:id>/', methods=['GET', 'POST'])
    @admin_login_req
    def auth_edit(id=None):
        form = AuthForm()
        auth = Auth.query.get_or_404(id)
        if form.validate_on_submit():
            data = form.data
            auth.url = data['url']
            auth.name = data['name']
            db.session.add(auth)
            db.session.commit()
            flash('修改权限成功!', 'ok')
            redirect(url_for('admin.auth_edit', id=id))
        return render_template('admin/auth_edit.html', form=form, auth=auth)

# 角色管理 #

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center 1]

class RoleForm(FlaskForm):
        name = StringField(
            label='角色名称',
            validators=[
                DataRequired('请输入角色名称')
            ],
            description='角色名称',
            render_kw={ 
                'class': 'form-control',
                'placeholder': '请输入角色名称'
            }
        )
        auths = SelectMultipleField(
            lable='权限列表',
            validators=[
                DataRequired('请选择权限列表！')
            ],
            description='权限列表',
            render_kw={ 
                'class': 'form-control',
            }
        )
        submit = SubmitField(
            '编辑',
            render_kw={ 
                'class': 'btn btn-primary',
            }
        )

*  修改上面的表单对象  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center 2]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center 3]
 *  编写API接口

@admin.route('/role/add', methods=['GET', 'POST'])
    def role_add():
        form = RoleForm()
        if form.validate_on_submit():
            data = form.data
            role = Role(
                name=data['name'],
                auths=','.join(data['auths'])
            )
            db.session.add(role)
            db.session.commit()
            flash('添加角色成功！', 'ok')
        return render_template('admin/role_add.html', form=form)
    
    @admin.route('/role/list/<int:page>/', methods=['GET'])
    @admin_login_req
    def role_list(page=None):
        if page is None:
            page =1
        page_data = Role.query.order_by(
            Role.addtime.desc()
        ).paginate(page=page, per_page=10)
        return render_template('admin/role_list.html', page_data=page_data)
    
    @admin.route('/role/del/<int:id>/', methods=['GET'])
    @admin_login_req
    def role_del(id=None):
        role = Role.query.filter_by(id=id).first_or_404()
        db.session.delete(role)
        db.session.commit()
        flash('删除角色成功！', 'ok')
        return redirect(url_for('admin.role_list', page=1))
    
    
    # 编辑角色
    @admin.route('/role/edit/<int:id>/', methods=['GET', 'POST'])
    @admin_login_req
    def role_edit(id=None):
        form = RoleForm()
        role = Role.query.get_or_404(id)
        if request.method == 'GET':
            form.auths.data = list(map(lambda v: int(v), role.auths.split(',')))
        if form.validate_on_submit():
            data = form.data
            role.name = data['name']
            role.auths = ','.join(map(lambda v: str(v), data['auths']))
            db.session.add(role)
            db.session.commit()
            flash('修改角色成功！', 'ok')
        return render_template('admin/role_edit.html', form=form, role=role)

#  #

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center]: /images/20221120/452ffef5be0744d8b79996f8e548f272.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center 1]: https://img-blog.csdnimg.cn/20201122153519896.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz,size_16,color_FFFFFF,t_70#pic_center
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center 2]: https://img-blog.csdnimg.cn/20201122162756731.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz,size_16,color_FFFFFF,t_70#pic_center
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz_size_16_color_FFFFFF_t_70_pic_center 3]: https://img-blog.csdnimg.cn/20201122162821848.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyMzcwOTEz,size_16,color_FFFFFF,t_70#pic_center