云上数据堡垒体验

# 示例代码：使用RBAC（基于角色的访问控制）模型
def check_permission(user_role, required_role):
    roles = {
        'admin': 3,
        'manager': 2,
        'user': 1
    }
    return roles.get(user_role, 0) >= roles.get(required_role, 0)

# 使用示例
if check_permission(current_user.role, 'manager'):
    # 允许访问
    pass
else:
    # 拒绝访问
    raise PermissionError("Access Denied")

# 示例代码：使用AES加密算法
from Crypto.Cipher import AES
import base64

def encrypt_data(data, key):
    cipher = AES.new(key, AES.MODE_EAX)
    nonce = cipher.nonce
    ciphertext, tag = cipher.encrypt_and_digest(data.encode('utf-8'))
    return base64.b64encode(nonce + ciphertext).decode('utf-8')

def decrypt_data(encrypted_data, key):
    decoded_data = base64.b64decode(encrypted_data)
    nonce = decoded_data[:16]
    ciphertext = decoded_data[16:]
    cipher = AES.new(key, AES.MODE_EAX, nonce=nonce)
    return cipher.decrypt(ciphertext).decode('utf-8')

# 示例代码：记录数据访问日志
import logging

logging.basicConfig(filename='data_access.log', level=logging.INFO)

def log_access(user_id, data_id):
    logging.info(f"User {user_id} accessed data {data_id}")

# 使用示例
log_access('user123', 'data456')