菜单权限作为父权限

from django.db import models

# Create your models here.
class User(models.Model):
    name=models.CharField(max_length=11)
    pwd=models.CharField(max_length=11)
    roles=models.ManyToManyField('Role')
    def __str__(self):
        return self.name

class Role(models.Model):
    title=models.CharField(max_length=11)
    permissions=models.ManyToManyField('Permission')
    def __str__(self):
        return self.title

class Menu(models.Model):
    title=models.CharField(max_length=32,verbose_name="菜单")
    icon=models.CharField(max_length=32,verbose_name="图标",null=True,blank=True)

class Permission(models.Model):
    title=models.CharField(max_length=32)
    url=models.CharField(max_length=32)
    menu=models.ForeignKey('Menu',on_delete=models.CASCADE,null=True)
    name=models.CharField("url别名",max_length=32,default="")
    pid=models.ForeignKey('self',on_delete=models.CASCADE,null=True,verbose_name="父权限")

    def __str__(self):
        return self.title

from app01.models import Role

def initial_session(user,request):
    permissions = Role.objects.filter(user=user).values('permissions__url',
                                                        'permissions__title',
                                                        'permissions__name',
                                                        'permissions__pk',
                                                        'permissions__pid',
                                                        'permissions__menu__title',
                                                        'permissions__menu__icon',
                                                        'permissions__menu__pk',
                                                        ).distinct()
    permission_list = []
    permission_names = []
    permission_menu_dict = {}
    for item in permissions:
        permission_list.append({
            "url":item["permissions__url"],
            "id":item["permissions__pk"],
            "pid":item["permissions__pid"],
            "title":item["permissions__title"],
        })
        permission_names.append(item['permissions__name'])
        menu_pk = item['permissions__menu__pk']
        if menu_pk:
            if menu_pk not in permission_menu_dict:
                permission_menu_dict[menu_pk] = {
                    "menu_title": item['permissions__menu__title'],
                    "menu_icon": item['permissions__menu__icon'],
                    "children": [
                        {
                            "title": item['permissions__title'],
                            "url": item['permissions__url'],
                            "pk": item['permissions__pk'],
                        }
                    ],
                }
            else:
                permission_menu_dict[menu_pk]["children"].append({
                    "title": item['permissions__title'],
                    "url": item['permissions__url'],
                })
    print(permission_menu_dict)
    request.session['permission_list'] = permission_list
    request.session['permission_names'] = permission_names
    request.session['permission_menu_dict'] = permission_menu_dict

import re

from django.template import Library

register=Library()
@register.inclusion_tag("rbac/menu.html")
def get_menu_style(request):
    permission_menu_dict = request.session.get('permission_menu_dict')
    for val in permission_menu_dict.values():
        for item in val["children"]:
            val["class"] = "active"
            if request.show_id==item["pk"]:
                val["class"] = ""
    return {'permission_menu_dict':permission_menu_dict}

@register.filter
def has_permission(btn_url, request):
    permission_names=request.session.get("permission_names")
    return btn_url in permission_names

import re

from django.utils.deprecation import MiddlewareMixin
from django.shortcuts import HttpResponse,redirect

class PermissionMiddleWare(MiddlewareMixin):
    def process_request(self,request):
        current_path = request.path
        for reg in ['/login/','/admin/']:
            ret=re.search(reg,current_path)
            if ret:
                return None
        user_id=request.session.get('user_id')
        if not user_id:
            return redirect('/login/')


        permission_list=request.session.get('permission_list')
        for item in permission_list:
            reg='^%s$'%item["url"]
            ret=re.search(reg,current_path)
            if ret:
                show_id=item["pid"] or item["id"]
                request.show_id = show_id
                return None
        return HttpResponse('无权限访问')