Yii框架权限控制

需求：公司拥有一套用户权限系统。我们在新版框架中，我们需要兼容这套用户权限系统。

 

问题：YII单表方式已经满足不了我们的需求，急切需要对YII进行扩展设计，支持数据库分表设计

 

解决方法：1、新建protected/sinashowExt/JController.php文件

 

/**
 * Controller is the customized base controller class.
 * All controller classes for this application should extend from this base class.
 */
class JController extends CController
{
    /**
     * @var string the default layout for the controller view. Defaults to '//layouts/column1',
     * meaning using a single column layout. See 'protected/views/layouts/column1.php'.
     */
    public $layout='//layouts/column1';
    /**
     * @var 菜单 {@link CMenu::items}.
     */
    public $menu=array();
    /**
     * @var 路径设置
     * be assigned to {@link CBreadcrumbs::links}. Please refer to {@link CBreadcrumbs::links}
     * for more details on how to specify this property.
     */
    public $breadcrumbs = array();
    //视图数据
    public $view        = array();
    //是否自动输出
    public $autoView    = false;
    //输出页面
    public $renderPage  = '';
    //页面提示文字
    public $notice  = '';
    //搜索标签
    public $searchTag   = array();
    //其他代码
    public $otherHtml   = '';
    //按钮标签
    public $buttonTag   = array();
    //单位标签
    public $unitTag     = '';
    //输出信息
    public $alertText   = '';
    //是否显示外框
    public $haveBorder   = true;

    public function init()
    {
        $cookie = Yii::app()->request->getCookies();
        Yii::app()->user->id  = $cookie->itemAt('SSD_user_id')->value;
        Yii::app()->user->name    = $cookie->itemAt('SSD_user_nick')->value;
    }

    /**
     * 判断是否有指定操作的权限
     *
     * @param string $action
     */
    public function checkPower($action)
    {
        return "purviewPcc::model()->checkPower('{$this->getModule()->getId()}', '{$this->getId()}', '{$action}')";
    }

    /**
     * 检查权限扩展
     *
     * @param string $action
     * @param string $contrl
     * @param string $module
     */
    public function checkPowerEx($action, $contrl=null, $module=null)
    {
        if ($contrl === null)
        {
            $contrl = $this->getId();
        }

        if ($module === null)
        {
            $module = $this->getModule()->getId();
        }

        return purviewPcc::model()->checkPower($module, $contrl, $action);
    }

    /**
     * 权限判断
     *
     */
     public function purview($module, $control, $action)
     {
        if (!purviewPcc::model()->checkPurview($module,$control,$action))
        {
            echo '没有访问权限！';
            Yii::app()->end();
        }
     }

    /**
     * Action操作前动作
     *
     * @param unknown_type $action
     * @return unknown
     */
    public function beforeAction($action)
    {
        if($action && $this->getModule())
            $this->purview($this->getModule()->getId(), $this->getId(), $action->getId());
        return true;
    }


    /**
     * Action操作后动作
     *
     * @param string $action
     */
    public function afterAction($action)
    {
        /** 是否自动输出 */
        if ($this->autoView)
        {
            //默认输入页面
            if (empty($this->renderPage))
                $this->renderPage    = $action->getId();
            $this->render($this->renderPage, $this->view);
        }
    }

    /**
     * 页面提示窗口
     *
     * @param string $view
     * @param array $data
     * @param bool $exit
     */
    public function alert($msg, $href = 'javascript:history.go(-1);', $time = 0, $exit = true, $view = '//system/alert', $data = array())
    {
        $this->autoView  = false;
        $data['msg']    = $msg;
        $data['href']   = $href;
        $data['time']   = $time;
        $this->render($view, $data);
        if ($exit)
        {
            Yii::app()->end();
        }
    }
}

 

 

使用方法：

例子：新做了菜单http://localhost/index.php?r=default/site/index菜单。操作有delete、create、update

步骤：

1、向综合后台管理员申请菜单权限和菜单操作权限(110101、11010101[删除]、11010102[新建]、11010103[修改])

2、在protected/config/purview.php 文件中为对应的action配置权限ID

 

return array(
    'default'=>array(
        'site'=>array(
            'index'=>110101,
            'delete'=>11010101,
            'create'=>11010102,
            'update'=>11010103
        )
    )
);

3、完成以上功能，基本已经完成了权限的配置，但是假如在用户没有某操作权限的时候，需要隐藏操作链接的时候，我们可以做一下操作

 

 

//表格内容
$this->widget('zii.widgets.grid.CGridView', array(
    'dataProvider'=>$model->search(),
    'columns'=>array(
        'id',
        'start_dt',
        'end_dt',
        array(
            'class'=>'CButtonColumn',
            'template'=>'{update} {delete}',
            'updateButtonOptions'=>array(
                'onclick'=>'$.fn.sinaShow.openWindow("节目修改", this.href); return false;',
            ),
            'buttons'=>array(
                'update'=>array(
                    'visible'=>$this->checkPower('update')
                ),
                'delete'=>array(
                    'visible'=>$this->checkPower('delete')
                ),
            )
        ),
    )
));

 

 

在这里的visible表达式中设置调用$this->checkPower('操作名');就可以隐藏没有权限访问的菜单了