访问权限控制

摘要：<?php/** * Created by PhpStorm. * User: zt111 * Date: 2018/10/12 * Time: 9:30 */namespace app\admin\controller;use think\App;use think\Controller;use app\common\model\AdminGroup;useapp\common\model

<?php
/**
* Created by PhpStorm.
* User: zt111
* Date: 2018/10/12
* Time: 9:30
*/

namespace app\admin\controller;

use think\App;
use think\Controller;
use app\common\model\AdminGroup;
use

app\common\model\AdminMenu;
use think\facade\Request;

class Base extends Controller
{
   public function __construct(App $app = null)
   {
       parent::__construct($app);

       $this->_admin = session('admin');
       $AdminGroup = AdminGroup::where(['gid' => $this->_admin['gid']])->find();
       if(!$AdminGroup){
           return json_decode(['code' => 1 , 'msg' =>'你没有权限']);
       }

       $group = json_decode($AdminGroup['rules']);
       $controller = Request::controller();
       $action = Request::action();
       $result = AdminMenu::where(['controller' => $controller, 'method' => $action])->find();

       if(!$result){
           return json_decode(['code' => 1 , 'msg' =>'你访问的功能不存在！']);
       }

       if($result['status'] == 1){
           return json_decode(['code' => 1 , 'msg' =>'对不起，该功能禁止使用']);
       }

       if(!in_array($result['mid'],$group)){
           return json_decode(['code' => 1 , 'msg' =>'对不起，你没有权限']);
       }
   }

}