网站权限分配 数据库实现

CREATE TABLE users (
    id INT PRIMARY KEY AUTO_INCREMENT,
    username VARCHAR(50) NOT NULL,
    password VARCHAR(255) NOT NULL
);

CREATE TABLE roles (
    id INT PRIMARY KEY AUTO_INCREMENT,
    name VARCHAR(50) NOT NULL
);

CREATE TABLE permissions (
    id INT PRIMARY KEY AUTO_INCREMENT,
    name VARCHAR(50) NOT NULL
);

CREATE TABLE user_roles (
    user_id INT,
    role_id INT,
    PRIMARY KEY (user_id, role_id),
    FOREIGN KEY (user_id) REFERENCES users(id),
    FOREIGN KEY (role_id) REFERENCES roles(id)
);

CREATE TABLE role_permissions (
    role_id INT,
    permission_id INT,
    PRIMARY KEY (role_id, permission_id),
    FOREIGN KEY (role_id) REFERENCES roles(id),
    FOREIGN KEY (permission_id) REFERENCES permissions(id)
);

import bcrypt

def check_permission(user_id, permission_name):
    # 获取用户角色
    user_roles = get_user_roles(user_id)
    for role_id in user_roles:
        # 获取角色权限
        role_permissions = get_role_permissions(role_id)
        for perm_id in role_permissions:
            permission = get_permission_by_id(perm_id)
            if permission['name'] == permission_name:
                return True
    return False

def get_user_roles(user_id):
    # 查询数据库获取用户角色ID列表
    pass

def get_role_permissions(role_id):
    # 查询数据库获取角色权限ID列表
    pass

def get_permission_by_id(permission_id):
    # 查询数据库获取权限详情
    pass

# 示例用法
if check_permission(1, 'edit_article'):
    print("用户有编辑文章的权限")
else:
    print("用户无编辑文章的权限")