101 lines
3.4 KiB
PHP
101 lines
3.4 KiB
PHP
|
<?php
|
||
|
|
declare(strict_types=1);
|
||
|
|
/**
|
||
|
|
*+------------------
|
||
|
|
* madong
|
||
|
|
*+------------------
|
||
|
|
* Copyright (c) https://gitee.com/motion-code All rights reserved.
|
||
|
|
*+------------------
|
||
|
|
* Author: Mr. April (405784684@qq.com)
|
||
|
|
*+------------------
|
||
|
|
* Official Website: https://madong.tech
|
||
|
|
*/
|
||
|
|
|
||
|
|
namespace app\service\admin\system;
|
||
|
|
|
||
|
|
use app\enum\system\PolicyPrefix;
|
||
|
|
use core\base\BaseService;
|
||
|
|
use core\casbin\Permission;
|
||
|
|
use core\exception\handler\AdminException;
|
||
|
|
|
||
|
|
class CasbinService extends BaseService
|
||
|
|
{
|
||
|
|
|
||
|
|
public function __construct()
|
||
|
|
{
|
||
|
|
$this->dao = null;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 更新casbin 策略
|
||
|
|
*
|
||
|
|
* @param array $currentPermissions
|
||
|
|
* @param array $incomingPolicies
|
||
|
|
*
|
||
|
|
* @throws \core\exception\handler\AdminException
|
||
|
|
*/
|
||
|
|
public function updateCasbinPolicies(array $currentPermissions, array $incomingPolicies): void
|
||
|
|
{
|
||
|
|
// 计算需要删除的权限：当前有但传入没有的
|
||
|
|
$permissionsToDelete = array_filter($currentPermissions, function ($currentPolicy) use ($incomingPolicies) {
|
||
|
|
foreach ($incomingPolicies as $incomingPolicy) {
|
||
|
|
if (
|
||
|
|
(string)$currentPolicy[0] === (string)$incomingPolicy[0] &&
|
||
|
|
(string)$currentPolicy[1] === (string)$incomingPolicy[1] &&
|
||
|
|
(string)$currentPolicy[2] === (string)$incomingPolicy[2] &&
|
||
|
|
(string)$currentPolicy[5] === (string)$incomingPolicy[5]
|
||
|
|
) {
|
||
|
|
return false; // 找到了匹配的，当前权限不需要删除
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return true; // 没有找到匹配的，当前权限需要删除
|
||
|
|
});
|
||
|
|
|
||
|
|
// 计算需要添加的权限：传入有但当前没有的
|
||
|
|
$permissionsToAdd = array_filter($incomingPolicies, function ($incomingPolicy) use ($currentPermissions) {
|
||
|
|
foreach ($currentPermissions as $currentPolicy) {
|
||
|
|
if (
|
||
|
|
(string)$incomingPolicy[0] === (string)$currentPolicy[0] &&
|
||
|
|
(string)$incomingPolicy[1] === (string)$currentPolicy[1] &&
|
||
|
|
(string)$incomingPolicy[2] === (string)$currentPolicy[2] &&
|
||
|
|
(string)$incomingPolicy[5] === (string)$currentPolicy[5]
|
||
|
|
) {
|
||
|
|
return false; // 找到了匹配的，传入权限不需要添加
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return true; // 没有找到匹配的，传入权限需要添加
|
||
|
|
});
|
||
|
|
|
||
|
|
// 删除不需要的权限
|
||
|
|
foreach ($permissionsToDelete as $policy) {
|
||
|
|
Permission::removeFilteredPolicy("0", $policy[0], $policy[1], '', '', '', $policy[5]);
|
||
|
|
}
|
||
|
|
|
||
|
|
// 添加新的权限
|
||
|
|
foreach ($permissionsToAdd as $policy) {
|
||
|
|
$res = Permission::addPolicy(...$policy);
|
||
|
|
if (!$res) {
|
||
|
|
throw new AdminException('添加失败：' . $policy[5]);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 根据菜单ID删除关联Casbin策略
|
||
|
|
*
|
||
|
|
* @param int|string $menuId 菜单ID
|
||
|
|
*
|
||
|
|
* @throws AdminException
|
||
|
|
*/
|
||
|
|
public function deletePoliciesByMenuId(int|string $menuId): void
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
$policyIdentifier = PolicyPrefix::MENU->value . (string)$menuId;
|
||
|
|
Permission::removeFilteredPolicy("0", '', '', '', '', '', $policyIdentifier);
|
||
|
|
} catch (\Throwable $e) {
|
||
|
|
throw new AdminException("删除菜单关联策略失败：{$e->getMessage()}");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|