django 权限管理

1.views.py

from django.db import models

class Menu(models.Model):
    title = models.CharField(max_length=32, verbose_name='菜单')
    icon = models.CharField(max_length=32, verbose_name='图标', null=True, blank=True)


class Permission(models.Model):
    """
    权限表
    """
    title = models.CharField(max_length=32, verbose_name='标题',blank=True)
    url = models.CharField(max_length=32, verbose_name='权限',blank=True)
    menu=models.ForeignKey("Menu",on_delete=models.CASCADE,null=True,blank=True)
    name=models.CharField(max_length=32,verbose_name='url别名',default="",blank=True)
    pid=models.ForeignKey('self',on_delete=models.CASCADE,null=True,verbose_name="父权限",blank=True)

    # is_menu = models.BooleanField(default=False, verbose_name='是否是菜单')
    # icon = models.CharField(max_length=32, verbose_name='图标', null=True, blank=True)
    
    class Meta:
        verbose_name_plural = '权限表'
        verbose_name = '权限表'
    
    def __str__(self):
        return self.title


class Role(models.Model):
    name = models.CharField(max_length=32, verbose_name='角色名称')
    permissions = models.ManyToManyField(to='Permission', verbose_name='角色所拥有的权限', blank=True)
    
    def __str__(self):
        return self.name


class User(models.Model):
    """
    用户表
    """
    name = models.CharField(max_length=32, verbose_name='用户名')
    password = models.CharField(max_length=32, verbose_name='密码')
    roles = models.ManyToManyField(to='Role', verbose_name='用户所拥有的角色', blank=True)
    
    def __str__(self):
        return self.name

2.html.py

{% extends 'web/layout.html' %}
{% load rbac %}
{% block content %}
    <div class="luffy-container">
        <div class="col-md-3 user-area">
            <div class="panel panel-default">
                <!-- Default panel contents -->
                <div class="panel-heading">
                    <i class="fa fa-address-book-o" aria-hidden="true"></i> 用户信息
                </div>

                <div class="panel-body">
                    <ul>
                        {% for user in user_list %}

                            <li class= {% if user.id|safe == uid %} "active" {% endif %}>
                                <a href="?uid={{ user.id }}">{{ user.name }}</a></li>

                        {% endfor %}
                    </ul>
                </div>

            </div>
        </div>

        <div class="col-md-3 role-area">
            <form method="post">
                {% csrf_token %}
                <input type="hidden" name="postType" value="role">
                <div class="panel panel-default">
                    <!-- Default panel contents -->
                    <div class="panel-heading">
                        <i class="fa fa-book" aria-hidden="true"></i> 角色
                        {% if uid %}
                            <button type="submit" class="right btn btn-success btn-xs"
                                    style="padding: 2px 8px;margin: -3px;">
                                <i class="fa fa-save" aria-hidden="true"></i>
                                保存
                            </button>
                        {% endif %}
                    </div>
                    <div class="panel-body" style="color: #d4d4d4;padding:10px  5px;">
                        提示：点击用户后才能为其分配角色
                    </div>
                    <table class="table">
                        <thead>
                        <tr>
                            <th>角色</th>
                            <th>选择</th>
                        </tr>
                        </thead>
                        <tbody>
                        {% for role in role_list %}
                            <tr {% if role.id|safe == rid %} class="active"  {% endif %}>

                                <td><a href="?{% gen_role_url request role.id %}">{{ role.name }}</a></td>
                                <td>
                                    {% if role.id in role_id_list %}
                                        <input type="checkbox" name="roles" value="{{ role.id }}" checked/>
                                    {% else %}
                                        <input  type="checkbox" name="roles" value="{{ role.id }}"/>
                                    {% endif %}
                                </td>
                            </tr>
                        {% endfor %}

                        </tbody>
                    </table>

                </div>
            </form>
        </div>

        <div class="col-md-6 permission-area">
            <form method="post">
                {% csrf_token %}
                <input type="hidden" name="postType" value="permission">
                <div class="panel panel-default">
                    <!-- Default panel contents -->
                    <div class="panel-heading">
                        <i class="fa fa-sitemap" aria-hidden="true"></i> 权限分配
                        {% if rid %}
                            <button class="right btn btn-success btn-xs" style="padding: 2px 8px;margin: -3px;">
                                <i class="fa fa-save" aria-hidden="true"></i>
                                保存
                            </button>
                        {% endif %}
                    </div>
                    <div class="panel-body" style="color: #d4d4d4;padding: 10px 5px;">
                        提示：点击角色后，才能为其分配权限。
                    </div>
                    <table class="table" id="body">
                        <tbody>

                        </tbody>
                    </table>
                </div>
            </form>
        </div>

    </div>
{% endblock %}
{% block js %}
    <script>
        $(function () {
            bindRootPermissionClick();
        });

        function bindRootPermissionClick() {
            $('.permission-area').on('click', '.root', function () {
                var caret = $(this).find('i');
                if (caret.hasClass('fa-caret-right')) {
                    caret.removeClass('fa-caret-right').addClass('fa-caret-down');
                    $(this).next().removeClass('hide');
                } else {
                    caret.removeClass('fa-caret-down').addClass('fa-caret-right');
                    $(this).next().addClass('hide');

                }
            })
        }



        $.ajax({
            url:"/permissions_tree/",
            type:"get",
            success:function(res){
                console.log(res);
                $.each(res,function(i,permission){
                    console.log(i,permission);
                    var menu_title=permission["menu__title"];
                    var menu_pk=permission["menu__pk"];
                    var url=permission["url"];
                    var parent_id=permission["pid_id"];
                    var pk=permission["pk"];
                    var title=permission["title"];

                    if (menu_title){

                        if($("#menu_"+menu_pk).length){


                             var s=`
                                <tr class='node' id="per_${pk}">
                                   <td><input  name="permissions_id" value='${pk}' type="checkbox">${title}</td>
                                <tr>`;
                             $("#menu_"+menu_pk).parent().append(s)
                        }else{

                              var s=`<tr class='root' id='menu_${menu_pk}'><td>${menu_title}</td></tr>
                                <tr class='node' id="per_${pk}">
                                   <td><input  name="permissions_id" value='${pk}' type="checkbox">${title}</td>
                                <tr>`;
                              $("#body").append(s);
                        }

                    }else{
                         var s=`

                          <td><input name="permissions_id" value='${pk}' type="checkbox">${title}</td>
                        `;
                             $("#per_"+parent_id).append(s)

                    }


                })


                var per_id_list={{ per_id_list }}
                $.each(per_id_list,function(i,j){
                    console.log($("[value='"+j+"']")[0])
                    $("#body [value='"+j+"']").prop("checked",true)
                })
            }
        });


    </script>
{% endblock %}

3.

@register.simple_tag
def gen_role_url(request, rid):
    params = request.GET.copy()
    params._mutable = True
    params['rid'] = rid
    return params.urlencode()