权限管理php mysql

// 示例代码：检查用户权限
$user_id = $_SESSION['user_id'];
$query = "SELECT * FROM user_roles WHERE user_id = $user_id";
$result = mysqli_query($conn, $query);
$row = mysqli_fetch_assoc($result);

if ($row['role'] == 'admin') {
    // 用户是管理员，允许访问
} else {
    // 用户不是管理员，拒绝访问
    header("Location: access_denied.php");
    exit();
}

// 示例代码：创建角色和权限表
CREATE TABLE roles (
    role_id INT PRIMARY KEY AUTO_INCREMENT,
    role_name VARCHAR(50) NOT NULL
);

CREATE TABLE permissions (
    permission_id INT PRIMARY KEY AUTO_INCREMENT,
    permission_name VARCHAR(50) NOT NULL
);

CREATE TABLE role_permissions (
    role_id INT,
    permission_id INT,
    PRIMARY KEY (role_id, permission_id),
    FOREIGN KEY (role_id) REFERENCES roles(role_id),
    FOREIGN KEY (permission_id) REFERENCES permissions(permission_id)
);

// 示例代码：分配角色给用户
INSERT INTO user_roles (user_id, role_id) VALUES (1, 1);