权限数据库

from sqlalchemy import create_engine, Column, Integer, String, ForeignKey
from sqlalchemy.ext.declarative import declarative_base
from sqlalchemy.orm import sessionmaker, relationship

Base = declarative_base()

class User(Base):
    __tablename__ = 'users'
    id = Column(Integer, primary_key=True)
    username = Column(String)
    roles = relationship('Role', secondary='user_roles')

class Role(Base):
    __tablename__ = 'roles'
    id = Column(Integer, primary_key=True)
    name = Column(String)
    permissions = relationship('Permission', secondary='role_permissions')

class Permission(Base):
    __tablename__ = 'permissions'
    id = Column(Integer, primary_key=True)
    name = Column(String)

class UserRoles(Base):
    __tablename__ = 'user_roles'
    user_id = Column(Integer, ForeignKey('users.id'), primary_key=True)
    role_id = Column(Integer, ForeignKey('roles.id'), primary_key=True)

class RolePermissions(Base):
    __tablename__ = 'role_permissions'
    role_id = Column(Integer, ForeignKey('roles.id'), primary_key=True)
    permission_id = Column(Integer, ForeignKey('permissions.id'), primary_key=True)

engine = create_engine('sqlite:///permissions.db')
Base.metadata.create_all(engine)
Session = sessionmaker(bind=engine)
session = Session()

# 示例：验证用户是否有某个权限
def has_permission(user_id, permission_name):
    user = session.query(User).filter_by(id=user_id).first()
    if user:
        for role in user.roles:
            for permission in role.permissions:
                if permission.name == permission_name:
                    return True
    return False

# 使用示例
user_id = 1
permission_name = 'read'
if has_permission(user_id, permission_name):
    print(f'User {user_id} has permission {permission_name}')
else:
    print(f'User {user_id} does not have permission {permission_name}')