Simple role-based permission management of RBAC

Simple role-based permission management of RBAC

1. What is permission management? permission management refers to the subdivision of background functions and the management of jobs divided by different employees

How RBAC is implemented is managed by limiting the methods of different controllers and controllers.

To implement RBAC, three tables, one user table, one role table, and one permission table are required.

User table:

Id ****** role_id

Role table

Role_id ****** access_ids (record all accessible permission IDs)

Permission table

Access_id

Records the actions of all controllers or controllers.

2. How to control it? Just make a judgment in the parent class of the Controller or the initialization method of the controller.

$ Role_id = $ _ SESSION ['Role _ id'];

$ Role = $ db-> role-> findByPk ($ role_id );

$ Access = $ db-> access-> findAllByPk ($ role ['Access _ id']);

Obtain the Controller or controller method to be executed based on the vro class

$ M = current_method (); // obtain the method to be accessed

If (! In_array ($ m, $ access )){

Redirect ('/Index ');

}

This article permanently updates the link address: