ユーザー権限管理機能を構築するエンタープライズ・リソース・プランニング（ERP）システムのPHP開発

CREATE DATABASE erp;

-- 创建用户表
CREATE TABLE users (
    id INT PRIMARY KEY AUTO_INCREMENT,
    name VARCHAR(50),
    email VARCHAR(100),
    password VARCHAR(100),
    role_id INT
);

-- 创建角色表
CREATE TABLE roles (
    id INT PRIMARY KEY AUTO_INCREMENT,
    name VARCHAR(50)
);

-- 创建权限表
CREATE TABLE permissions (
    id INT PRIMARY KEY AUTO_INCREMENT,
    name VARCHAR(50)
);

-- 在角色表中添加权限字段
ALTER TABLE roles ADD permissions VARCHAR(255);

-- 在权限表中添加角色字段
ALTER TABLE permissions ADD roles VARCHAR(255);

-- 添加初始角色
INSERT INTO roles (name) VALUES ('管理员');
INSERT INTO roles (name) VALUES ('普通用户');

-- 添加初始权限
INSERT INTO permissions (name) VALUES ('查看订单');
INSERT INTO permissions (name) VALUES ('创建订单');
INSERT INTO permissions (name) VALUES ('编辑订单');

-- 更新角色权限字段
UPDATE roles SET permissions = '1,2,3' WHERE id = 1;
UPDATE roles SET permissions = '1' WHERE id = 2;

-- 更新权限角色字段
UPDATE permissions SET roles = '1' WHERE id IN (1, 2, 3)

<?php
$host = 'localhost';
$dbname = 'erp';
$username = 'root';
$password = '';

try {
    $db = new PDO("mysql:host=$host;dbname=$dbname", $username, $password);
} catch (PDOException $e) {
    die("连接失败: " . $e->getMessage());
}
?>

<?php
function hasPermission($permission) {
    global $db;
    $role_id = $_SESSION['role_id'];
    
    $query = $db->prepare("SELECT permissions FROM roles WHERE id = ?");
    $query->execute([$role_id]);
    $permissions = $query->fetch()['permissions'];
    
    return in_array($permission, explode(',', $permissions));
}

function redirect($url) {
    header("Location: $url");
    exit();
}
?>

<?php
session_start();
include 'config.php';
include 'functions.php';
?>

<?php
if (!hasPermission('创建订单')) {
    echo "您没有权限创建订单！";
    exit();
}

// 允许创建订单的代码...
?>