php实现权限管理

<?php
// 模拟用户数据
$users = [
    ['id' => 1, 'username' => 'admin', 'password' => 'admin123', 'role' => 'admin'],
    ['id' => 2, 'username' => 'user', 'password' => 'user123', 'role' => 'user']
];

// 模拟权限数据
$permissions = [
    'admin' => ['create', 'read', 'update', 'delete'],
    'user' => ['read']
];

// 用户认证
function authenticate($username, $password) {
    global $users;
    foreach ($users as $user) {
        if ($user['username'] === $username && $user['password'] === $password) {
            return $user;
        }
    }
    return null;
}

// 授权检查
function authorize($user, $permission) {
    global $permissions;
    return in_array($permission, $permissions[$user['role']]);
}

// 示例使用
$username = $_POST['username'] ?? '';
$password = $_POST['password'] ?? '';

$user = authenticate($username, $password);
if ($user) {
    if (authorize($user, 'create')) {
        echo "你有权限创建资源";
    } else {
        echo "你没有权限创建资源";
    }
} else {
    echo "认证失败";
}
?>