CakePHP项目中引入Auth & Acl 控制-php教程-PHP中文网

CakePHP项目中引入Auth & Acl 控制

巴扎黑

发布： 2016-11-11 09:49:14

原创

1272 人浏览过

在此简单记录操作步骤，以备后期查阅。

一、引入auth /app/Controller/AppController.php

Php代码

class AppController extends Controller {  
    public $components = array(  
        &#39;Acl&#39;,  
        &#39;Auth&#39; => array(  
            &#39;authorize&#39; => array(  
                &#39;Actions&#39; => array(&#39;actionPath&#39; => &#39;controllers&#39;)  
            )  
        ),  
        &#39;Session&#39;  
    );  
    public $helpers = array(&#39;Html&#39;, &#39;Form&#39;, &#39;Session&#39;);  
  
    public function beforeFilter() {  
        //Configure AuthComponent  
        $this->Auth->loginAction = array(  
          &#39;controller&#39; => &#39;users&#39;,  
          &#39;action&#39; => &#39;login&#39;  
        );  
        $this->Auth->logoutRedirect = array(  
          &#39;controller&#39; => &#39;users&#39;,  
          &#39;action&#39; => &#39;login&#39;  
        );  
        $this->Auth->loginRedirect = array(  
          &#39;controller&#39; => &#39;posts&#39;,  
          &#39;action&#39; => &#39;add&#39;  
        );  
    }  
}

登录后复制

二、生成acl表

Bash代码

./Console/cake schema create DbAcl

三、添加组及用户

设置Model文件 /app/Model/User.php

Php代码

class User extends AppModel {  
    public $belongsTo = array(&#39;Group&#39;);  
    public $actsAs = array(&#39;Acl&#39; => array(&#39;type&#39; => &#39;requester&#39;));  
  
    public function parentNode() {  
        if (!$this->id && emptyempty($this->data)) {  
            return null;  
        }  
        if (isset($this->data[&#39;User&#39;][&#39;group_id&#39;])) {  
            $groupId = $this->data[&#39;User&#39;][&#39;group_id&#39;];  
        } else {  
            $groupId = $this->field(&#39;group_id&#39;);  
        }  
        if (!$groupId) {  
            return null;  
        }  
        return array(&#39;Group&#39; => array(&#39;id&#39; => $groupId));  
    }  
    public function bindNode($user) {  
        return array(&#39;model&#39; => &#39;Group&#39;, &#39;foreign_key&#39; => $user[&#39;User&#39;][&#39;group_id&#39;]);  
    }  
 }

登录后复制

文件 /app/Model/Group.php

Php代码

class Group extends AppModel {  
    public $actsAs = array(&#39;Acl&#39; => array(&#39;type&#39; => &#39;requester&#39;));  
  
    public function parentNode() {  
        return null;  
    }  
}

登录后复制

利用bake生成Users、Groups的mvc文件，添加组及用户，生成aros数据。

四、利用AclExtras 生成aco表数据
下载AclExtras 安装至/app/Plugin/ 目录下

Php代码

//app/Config/boostrap.php  
// ...  
CakePlugin::load(&#39;AclExtras&#39;);  
  利用bash命令生成可用的acos数据
Bash代码  
./Console/cake AclExtras.AclExtras aco_sync

登录后复制

五、补充login及logout

Php代码

<!-- login.ctp -->  
<h2>Login</h2>  
<?php  
echo $this->Form->create(&#39;User&#39;, array(  
    &#39;url&#39; => array(  
        &#39;controller&#39; => &#39;users&#39;,  
        &#39;action&#39; => &#39;login&#39;  
    )  
));  
echo $this->Form->input(&#39;User.username&#39;);  
echo $this->Form->input(&#39;User.password&#39;);  
echo $this->Form->end(&#39;Login&#39;);  
?>  
############分割线########  
// action  
public function login() {  
    if ($this->Session->read(&#39;Auth.User&#39;)) {  
        $this->Session->setFlash(&#39;You are logged in!&#39;);  
        return $this->redirect(&#39;/&#39;);  
    }  
}

登录后复制

Php代码

public function logout() {  
    $this->redirect($this->Auth->logout());  
}

登录后复制

六、ACO相关
acos 的展示利用TreeBehavior

Php代码

// /app/Model/Aco.php 文件  
public $actsAs = array(&#39;Tree&#39;);  
public $displayField = &#39;alias&#39;;  
  
// 输出  
$this->Aco->generateTreeList(null, null, null, &#39;   &#39;);

登录后复制

七、权限分配

Php代码

public function initDB() {  
    $group = $this->User->Group;  
  
    // Allow admins to everything  
    $group->id = 1;  
    $this->Acl->allow($group, &#39;controllers&#39;);  
  
    // allow managers to posts and widgets  
    $group->id = 2;  
    $this->Acl->deny($group, &#39;controllers&#39;);  
    $this->Acl->allow($group, &#39;controllers/Posts&#39;);  
    $this->Acl->allow($group, &#39;controllers/Widgets&#39;);  
  
    // allow users to only add and edit on posts and widgets  
    $group->id = 3;  
    $this->Acl->deny($group, &#39;controllers&#39;);  
    $this->Acl->allow($group, &#39;controllers/Posts/add&#39;);  
    $this->Acl->allow($group, &#39;controllers/Posts/edit&#39;);  
    $this->Acl->allow($group, &#39;controllers/Widgets/add&#39;);  
    $this->Acl->allow($group, &#39;controllers/Widgets/edit&#39;);  
  
    // allow basic users to log out  
    $this->Acl->allow($group, &#39;controllers/users/logout&#39;);  
  
    // we add an exit to avoid an ugly "missing views" error message  
    echo "all done";  
    exit;  
}

登录后复制

八、整理

Php代码  
/** 
     * custom beforeFilter 
     */  
    public function beforeFilter() {  
        parent::beforeFilter();  
        $this->Auth->allow(&#39;XXX&#39;);  
        // $this->Auth->allow();  
    }

登录后复制