权限管理代码

settings.py

"""
Django settings for s8day88quanxian project.

Generated by 'django-admin startproject' using Django 1.11.9.

For more information on this file, see
https://docs.djangoproject.com/en/1.11/topics/settings/

For the full list of settings and their values, see
https://docs.djangoproject.com/en/1.11/ref/settings/
"""

import os

# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))


# Quick-start development settings - unsuitable for production
# See https://docs.djangoproject.com/en/1.11/howto/deployment/checklist/

# SECURITY WARNING: keep the secret key used in production secret!
SECRET_KEY = '+0ec#ojnu8uc(5w#lx#9fci#ucm*pr2m66hl1*1wvjo(4a@97@'

# SECURITY WARNING: don't run with debug turned on in production!
DEBUG = True

ALLOWED_HOSTS = []


# Application definition

INSTALLED_APPS = [
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'app01.apps.App01Config',
    'rbac.apps.RbacConfig',
]

MIDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
    'rbac.service.rbac.M1',
]

from django.contrib.sessions.middleware import SessionMiddleware
from django.contrib.sessions.backends import db
ROOT_URLCONF = 's8day88quanxian.urls'

TEMPLATES = [
    {
        'BACKEND': 'django.template.backends.django.DjangoTemplates',
        'DIRS': [os.path.join(BASE_DIR, 'templates')]
        ,
        'APP_DIRS': True,
        'OPTIONS': {
            'context_processors': [
                'django.template.context_processors.debug',
                'django.template.context_processors.request',
                'django.contrib.auth.context_processors.auth',
                'django.contrib.messages.context_processors.messages',
            ],
        },
    },
]

WSGI_APPLICATION = 's8day88quanxian.wsgi.application'


# Database
# https://docs.djangoproject.com/en/1.11/ref/settings/#databases

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.sqlite3',
        'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
        'OPTIONS': {
        'timeout': 20,
    }
    }
}


# Password validation
# https://docs.djangoproject.com/en/1.11/ref/settings/#auth-password-validators

AUTH_PASSWORD_VALIDATORS = [
    {
        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
    },
]


# Internationalization
# https://docs.djangoproject.com/en/1.11/topics/i18n/

LANGUAGE_CODE = 'en-us'

TIME_ZONE = 'UTC'

USE_I18N = True

USE_L10N = True

USE_TZ = True


# Static files (CSS, JavaScript, Images)
# https://docs.djangoproject.com/en/1.11/howto/static-files/

STATIC_URL = '/static/'

urls.py

"""s8day88quanxian URL Configuration

The `urlpatterns` list routes URLs to views. For more information please see:
    https://docs.djangoproject.com/en/1.11/topics/http/urls/
Examples:、
Function views
    1. Add an import:  from my_app import views
    2. Add a URL to urlpatterns:  url(r'^$', views.home, name='home')
Class-based views
    1. Add an import:  from other_app.views import Home
    2. Add a URL to urlpatterns:  url(r'^$', Home.as_view(), name='home')
Including another URLconf
    1. Import the include() function: from django.conf.urls import url, include
    2. Add a URL to urlpatterns:  url(r'^blog/', include('blog.urls'))
"""
from django.conf.urls import url
from django.contrib import admin
from app01 import views
urlpatterns = [
    url(r'^admin/', admin.site.urls),
    url(r'^$', views.login),
    url(r'^login/$', views.login),
    url(r'^users/$', views.users),
    url(r'^orders/$', views.orders),
    url(r'^orders/add/$', views.orders_add),
    url(r'^orders/delete/$', views.orders_delete),
    url(r'^orders/edit$', views.orders_edit),
    url(r'^users/add/$', views.users_add),
    url(r'^users/delete/$', views.users_delete),
    url(r'^users/edit/$', views.users_edit),
    url(r'^logout/$', views.logout),
    url(r'^m1/$', views.m1),
    url(r'^m2/$', views.m2),

]

app01应用下面的views.py

import re
from django.shortcuts import render,redirect,HttpResponse

# Create your views here.
from rbac.models import *
from rbac.service.base import Permissions
def login(request):
    if request.method=="GET":
        return render(request,"login.html")
    else:
        user=request.POST.get("user")
        pwd=request.POST.get("pwd")
        user=UserInfo.objects.filter(name=user,pwd=pwd).first()
        if user:
            request.session["user_id"]=user.pk

            from rbac.service.initial import initial_session
            initial_session(request,user)

            return HttpResponse("登录成功")
        else:
            return redirect("/login/")

def users(request):


    return render(request,"users.html",locals())

def orders(request):

    code_list=request.code_list
    Per = Permissions(code_list)
    return render(request,"orders.html",locals())
def orders_add(request):
    return HttpResponse("欢迎来到添加订单页面")
def orders_delete(request):
    return HttpResponse("删除成功")
def orders_edit(request):
    return HttpResponse("编辑页面")

def users_add(request):
    return HttpResponse("添加用户")
def users_delete(request):
    return HttpResponse("删除用户")

def users_edit(request):
    return HttpResponse("编辑用户")
def logout(request):
    request.session.flush()
    return redirect("/login/")

def m1(request):
    """
    [{'id': 2, 'url': '/orders/', 'title': '订单列表', 'pid': None, 'menu_id': 2, 'menu_caption': '订单管理'},
    {'id': 3, 'url': '/users/add/', 'title': '添加用户', 'pid': 8, 'menu_id': 1, 'menu_caption': '用户角色管理'},
    {'id': 4, 'url': '/users/delete', 'title': '删除用户', 'pid': 8, 'menu_id': 1, 'menu_caption': '用户角色管理'},
    {'id': 6, 'url': '/orders/add/', 'title': '添加订单', 'pid': 1, 'menu_id': 2, 'menu_caption': '订单管理'},
    {'id': 7, 'url': '/orders/delete', 'title': '删除订单', 'pid': 1, 'menu_id': 2, 'menu_caption': '订单管理'},
    {'id': 9, 'url': '/users/', 'title': '用户列表', 'pid': None, 'menu_id': 1, 'menu_caption': '用户角色管理'}]
    """

    return render(request, "m1.html", locals())
    # menu_dict={
    #   1:{
    #       "title":"菜单一",
    #       "active": False ,
    #       "children":[
    #           {"title":"查看用户列表","url":"xxxxxxxx","active":False} ,
    #           {"title":"添加用户","url":"xxxxxxx","active":False}
    #       ]},
    #     2:{
    #         "title":"菜单二",
    #         "active":True,
    #         "children":[
    #             {"title":"查看订单","url":"xxxxxxx","active":True},
    #             {"title":"添加订单","url":"xxxxxxx","active":False},
    #         ]
    #     }
    # }




def m2(request):


    # menu_dict={
    #   1:{
    #       "title":"菜单一",
    #       "active":True ,
    #       "children":[
    #           {"title":"查看用户列表","url":"xxxxxxxx","active":False} ,
    #           {"title":"添加用户","url":"xxxxxxx","active":True}
    #       ]},
    #
    #
    #     2:{
    #         "title":"菜单二",
    #         "active":False,
    #         "children":[
    #             {"title":"查看订单","url":"xxxxxxx","active":False},
    #             {"title":"添加订单","url":"xxxxxxx","active":False},
    #         ]
    #     }
    # }

    return render(request, "m2.html", locals())

rbac应用

service文件夹下的 

   base.py

class Permissions(object):
    def __init__(self,code_list):
        self.code_list=code_list
    def add(self):
        return "add" in self.code_list
    def delete(self):
        return "delete" in self.code_list
    def edit(self):
        return "edit" in self.code_list
    def list(self):
        return "list" in self.code_list

    initial.py

def initial_session(request,user):
      # 方式一：
#       # 获取当前登录用户的所有权限
#       permission_info = user.roles.all().values("permission__url", "permission__title").distinct()
#
#
#       temp = []
#       for i in permission_info:
#         temp.append(i["permission__url"])
#       request.session["permission_list"] = temp
# 方式二
# 创建一个数据格式：包含所有权限，权限所在组，权限编号
      permission_info = user.roles.all().values( "permission__id",
                                                 "permission__url",
                                                 "permission__title",
                                                "permission__permission_group_id",
                                                 "permission__code",
                                                 "permission__permission_group__menu__id",
                                                 "permission__permission_group__menu__caption",
                                                 "permission__parent_id"
                                                 ).distinct()


     # 构建数据
    # 将这个列表转换为字典的形式
      permission_list=[]

      for permission_item in permission_info:
          temp={
              "id":permission_item["permission__id"],
              "url":permission_item["permission__url"],
              "title":permission_item["permission__title"],
              "pid":permission_item["permission__parent_id"],
              "menu_id":permission_item["permission__permission_group__menu__id"],
              "menu_caption":permission_item["permission__permission_group__menu__caption"],

          }
          permission_list.append(temp)

     # 将自己重构的这个列表注册到session中
      request.session["permission_list"]= permission_list



     # 将登录用户的所有权限写入到session中
      permission_dict = {}
      for item in permission_info:

          group_id = item["permission__permission_group_id"]

          if group_id in permission_dict:

              permission_dict[group_id]['urls'].append(item["permission__url"])
              permission_dict[group_id]['codes'].append(item["permission__code"])
          else:

              permission_dict[group_id] = {
                  'urls': [item["permission__url"]],
                  'codes': [item["permission__code"]]
              }

          request.session["permission_dict"] = permission_dict

   rbac.py

from django.utils.deprecation import MiddlewareMixin

from django.shortcuts import redirect,HttpResponse,render

class M1(MiddlewareMixin):
    def process_request(self,request):


        current_path=request.path_info
        print(current_path)

        valid_url_menu=["/login/","/reg/","/logout/","/admin/.*",'/$']

        import re
        for valid_url in valid_url_menu:
            ret=re.match(valid_url,current_path)
            if ret:
                return None
            # 取出当前登录用户所有的权限列表
            # 方式1
        # permission_list=request.session.get("permission_list")
        # 方式2：


         # 验证用户是否登录
        user_id=request.session.get("user_id")
        print(user_id)
        if not user_id:
            return redirect("/login/")
        import re
        permission_dict=request.session.get("permission_dict")
        print(permission_dict)
        for item in permission_dict.values():
            permission_url=item["urls"]
            permission_code=item["codes"]

            for url in permission_url:
                url="^%s$"%url
                ret_url=re.match(url,current_path)
                if ret_url:
                    request.code_list=permission_code
                    return None    # return none代表直接通过

        return HttpResponse("没有权限")











    # 方式一
        # flag=False
        # for permission_url in permission_list:
        #     # permission_url="^{}$".format(permission_url)    #字符串格式化
        #     permission_url="^%s$"%permission_url
        #     ret=re.match(permission_url,current_path)
        #
        #     if ret:
        #         print(ret)
        #         flag=True
        #         break
        # if not flag:
        #     return HttpResponse("没有权限")

templatetags文件夹下的

my_tags.py

# 自己写的自定义标签
import re
from django import template

register=template.Library()

@register.inclusion_tag("menu.html")
def get_menu(request):
    permission_list = request.session.get("permission_list")
    # 判断是否可以放到菜单栏中
    temp_dict={}
    for item in permission_list:      #permission_list是我在inital中构建的数据，他是一个列表，里面是一组组的键值对
        print(item)
        if not item["pid"]:
            item["active"]=False
            temp_dict[item["id"]]=item
    # 判断active的状态
    current_path=request.path_info

    for item in permission_list:
        print(current_path,item["url"])
        pid=item["pid"]
        url="^%s$"%item["url"]

        if re.match(url,current_path):
            if not pid:
                temp_dict[item["id"]]["active"]=True
            else:
                temp_dict[pid]["active"]=True





            # 将temp_dict转换为menu_dict
    menu_dict = {}
    for item in temp_dict.values():
        if item["menu_id"] in menu_dict:
            temp = {"title": item["title"], "url": item["url"], "active": item["active"]},
            menu_dict[item["menu_id"]]["children"].appen(temp)
            if item["active"]:
                menu_dict[item["menu_id"]]["active"] = True
        else:
            menu_dict[item["menu_id"]] = {

                "active": item["active"],
                "menu_caption": item["menu_caption"],
                "children": [
                    {"title": item["title"], "url": item["url"], "active": item["active"]},
                ]
            }


    return{"menu_dict":menu_dict}

admin.py

from django.contrib import admin

# Register your models here.

from .models import *

class  UserInfoConfig(admin.ModelAdmin):
    list_display = ["id","name","email"]
    # list_display_links = ["name"]
    # ordering = ["id"]
    # search_fields = ["name"]
    # list_filter =["roles"]
    # list_editable = ["name"]
    # fields = ["name"]
    # exclude = ["name"]     #和files相反，意思就是除了这个字段，其余字段都展示
    # readonly_fields = ["name"]   #只读，只让看不让动
    # fieldsets = (
    #     ('基本数据', {
    #         'fields': ('name', 'email')
    #     }),
    #
    #     ('其他', {
    #         'classes': ('collapse', 'wide', 'extrapretty'),  # 'collapse','wide', 'extrapretty'
    #         'fields': ('roles',),
    #     }),
    # )
    def foo(self,request,queryset):
        print(queryset)
        queryset.update(email="lan@qq.com")
    foo.short_description = "中文显示自定义Actions"
    actions = [foo,]
admin.site.register(UserInfo,UserInfoConfig)




# admin.site.register(UserInfo)
# admin.site.register(Role)
# admin.site.register(PermissionGroup)
# admin.site.register(Menu)
class RoleConfig(admin.ModelAdmin):
    list_display = ["id","title"]
admin.site.register(Role,RoleConfig)

class PermissionGroupConfig(admin.ModelAdmin):
    list_display = ["id","caption","menu"]
    ordering = ["id"]
admin.site.register(PermissionGroup, PermissionGroupConfig)

class PermissionConfig(admin.ModelAdmin):
    list_display = ["id","title","url","permission_group","code","parent"]
    ordering = ["id"]
admin.site.register(Permission,PermissionConfig)
class MenuConfig(admin.ModelAdmin):
    list_display = ["id","caption"]
admin.site.register(Menu,MenuConfig)

models.py

from django.db import models

# Create your models here.

class UserInfo(models.Model):
    name=models.CharField(max_length=32)
    pwd=models.CharField(max_length=32)
    email=models.EmailField()
    roles=models.ManyToManyField(to="Role")

    def __str__(self):
        return self.name

class Role(models.Model):
    title=models.CharField(max_length=32)
    permission=models.ManyToManyField(to="Permission")

    def __str__(self):
        return self.title

class Menu(models.Model):
    caption=models.CharField(max_length=32)
    def __str__(self):
        return self.caption

class Permission(models.Model):
    url=models.CharField(max_length=32)
    title=models.CharField(max_length=32)
    permission_group=models.ForeignKey(to="PermissionGroup",default=1)
    code=models.CharField(max_length=32,default="")
    parent=models.ForeignKey("self",null=True,blank=True)

    def __str__(self):
        return self.title

class PermissionGroup(models.Model):
    caption=models.CharField(max_length=32)
    menu=models.ForeignKey(to="Menu",default=1)

    def __str__(self):
        return self.caption

templates下

base.html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width,initial-scale=1">
    <link rel="stylesheet" href="https://cdn.bootcss.com/bootstrap/3.3.7/css/bootstrap.min.css">
    <title>Title</title>
    <style>
     .active{
        color: red;
     }
     .hide {
        display: none;
     }
    </style>
</head>
<body>
{% load my_tags  %}
{% include "nav.html" %}
 <div class="container-fluid" style="margin-top: 70px">
      <div class="row">
           {% get_menu request %}
            <div class="col-md-9">
           {% block con %}

           {% endblock %}
            </div>
      </div>

 </div>

</body>
</html>

login.html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
</head>
<body>
<form action="" method="post">
    {% csrf_token %}
    <p>用户名<input type="text" name="user"></p>
    <p>密码<input type="password" name="pwd"></p>
    <input type="submit">
</form>
</body>
</html>

m1.html

{% extends "base.html" %}
{% block con %}
<div class="col-sm-6 col-md-6 sidebar">内容一</div>
{% endblock %}

m2.html

{% extends "base.html" %}
{% block con %}
<div class="col-sm-6 col-md-6 sidebar">内容二</div>
{% endblock %}

menu.html

    <div class="col-sm-3 col-md-2 sidebar">
       {% for item in menu_dict.values %}

           <div>
              {{ item.menu_caption }}</div>
               {% if item.active %}
                    <ul class="nav nav-sidebar">
                     {% else %}
                       <ul class="nav hide nav-sidebar">

               {% endif %}
                 {% for son in item.children  %}
                    {% if son.active %}
                       <li><a href="{{ son.url }}" class="active">{{ son.title }}</a></li>
                          {% else %}
                           <li><a href="{{ son.url }}" >{{ son.title }}</a></li>
                    {% endif %}
                 {% endfor %}

            </ul>
       {% endfor %}


    </div>

nav.html

<nav class="navbar navbar-inverse navbar-fixed-top" style="background-color: #336699; " >
      <div class="container-fluid">
        <div class="navbar-header" >
          <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#navbar" aria-expanded="false" aria-controls="navbar">
            <span class="sr-only">Toggle navigation</span>
            <span class="icon-bar"></span>
            <span class="icon-bar"></span>
            <span class="icon-bar"></span>
          </button>
          <a class="navbar-brand" href="#">菜单系列</a>
        </div>
        <div id="navbar" class="navbar-collapse collapse">


        </div>
      </div>
    </nav>

orders.html

{% extends "base.html" %}
{% block con %}
    <div class="">


            {% if Per.add %}

                <p><a href="/orders/add">
                    <button class="btn btn-primary pull-right">添加订单</button>
                </a></p>
            {% endif %}




</div>

<table class="table table-striped"  border="1">
    <tr>
        <td>订单号</td>
        <td>订单日期</td>
        <td>商品名称</td>
    </tr>
    <tr>
        <td>123</td>
        <td>2012-12-2</td>
        <td>dawei</td>
    </tr>
</table>
{% endblock %}
<div class="">


            {% if Per.add %}

                <p><a href="/orders/add">
                    <button class="btn btn-primary pull-right">添加订单</button>
                </a></p>
            {% endif %}




</div>

<table class="table table-striped"  border="1">
    <tr>
        <td>订单号</td>
        <td>订单日期</td>
        <td>商品名称</td>
    </tr>
    <tr>
        <td>123</td>
        <td>2012-12-2</td>
        <td>dawei</td>
    </tr>
</table>

users.html

{% extends "base.html" %}
{% block  con %}
    <h1>我的妈呀</h1>
{% endblock %}