如何实现记账系统的权限管理 - 使用PHP开发权限管理功能

// 定义用户身份和权限级别
$users = [
  [
    'username' => 'admin',
    'password' => 'admin123',
    'role' => 'admin' // 管理员用户
  ],
  [
    'username' => 'user1',
    'password' => '123456',
    'role' => 'user' // 普通用户
  ],
  [
    'username' => 'user2',
    'password' => '654321',
    'role' => 'user' // 普通用户
  ]
];

// 用户认证
function authenticate($username, $password) {
  global $users;
  foreach ($users as $user) {
    if ($user['username'] === $username && $user['password'] === $password) {
      return $user;
    }
  }
  return null;
}

// 权限判断
function checkPermission($user, $permission) {
  if ($user['role'] === 'admin') {
    return true; // 管理员用户拥有所有权限
  }
  
  // 普通用户只拥有部分权限
  $permissions = [
    'create' => ['user'],
    'read' => ['user', 'admin'],
    'update' => ['user'],
    'delete' => ['user']
  ];
  
  if (isset($permissions[$permission]) && in_array($user['role'], $permissions[$permission])) {
    return true;
  }
  return false;
}

// 权限控制
function performAction($user, $action) {
  if (checkPermission($user, $action)) {
    echo "Performing action: " . $action;
  } else {
    echo "Permission denied!";
  }
}

// 用户认证示例
$user = authenticate('admin', 'admin123');
if ($user) {
  performAction($user, 'create'); // 具备权限，输出 "Performing action: create"
  performAction($user, 'delete'); // 具备权限，输出 "Performing action: delete"
} else {
  echo "Invalid username or password!";
}