Policy

Policy（即策略）是在特定模型或者資源中組織授權邏輯的類，用來處理用戶授權動作。

組件要求

• php: ^7.1
• ext-json: >=1.0
• easyswoole/spl: ^1.1

安裝

composer require easyswoole/policy

倉庫地址

easyswlle/policy

使用方法

use EasySwoole\Policy\PolicyNode;
use EasySwoole\Policy\Policy;

//授權動作
//PolicyNode::EFFECT_ALLOW   允許
//PolicyNode::EFFECT_DENY    拒絕
//PolicyNode::EFFECT_UNKNOWN 未知

$policy = new Policy();
//添加節點授權   
$policy->addPath('/user/add',PolicyNode::EFFECT_ALLOW);
$policy->addPath('/user/update',PolicyNode::EFFECT_ALLOW);
$policy->addPath('/user/delete',PolicyNode::EFFECT_DENY);
$policy->addPath('/user/*',PolicyNode::EFFECT_DENY);

//驗證節點權限
var_dump($policy->check('user/asdasd'));//deny
var_dump($policy->check('user/add'));   //allow
var_dump($policy->check('user/update'));//allow

/*
 * 允許/api/*,但是唯獨拒絕/api/order/charge,/api/order/info,/api/sys/*
 */

$policy->addPath('/api/*',PolicyNode::EFFECT_ALLOW);
$policy->addPath('/api/order/charge',PolicyNode::EFFECT_DENY);
$policy->addPath('/api/order/info',PolicyNode::EFFECT_DENY);
$policy->addPath('/api/sys/*',PolicyNode::EFFECT_DENY);

var_dump($policy->check('/api/whatever'));
var_dump($policy->check('/api/order/charge'));
var_dump($policy->check('/api/order/info'));
var_dump($policy->check('/api/sys/whatever'));

//對象添加
$root = new PolicyNode('*');
$userChild = $root->addChild('user');
$userAddChild = $userChild->addChild('add');
$userAddChild->addChild('aaaaaa')->setAllow(PolicyNode::EFFECT_ALLOW);
$userChild->addChild('update')->setAllow(PolicyNode::EFFECT_DENY);
$userChild->addChild('*')->setAllow(PolicyNode::EFFECT_ALLOW);

$apiChild = $root->addChild('charge');
$apiChild->addChild('*');

$node = $root->search('/user/add/aaaa');
if ($node) {
    var_dump($node->isAllow());
}

相關倉庫

基于Policy組件的后臺權限管理demo easyswoole_admin