yii2-RBAC-rest api开发思路

rest api是通过资源请求的，所以不像一般的/add /edit等来判断是否拥有权限。

我们可以写个方法一键写入权限的时候默认增加 ，其实和常规的YII2 RBAC权限一样的做法，我就不在这里详细说RBAC怎么做了，网上也有很多资料，我会提下，网上教程没有的，角色添加后的编辑怎么操作

/index = get请求

/create = post请求

/update = put/patch请求

/options = delete;

一键写入权限

//一键插入所有权限
public function actionInit()
{
$trans = Yii::$app->db->beginTransaction();
$controllers_name = array();
try {
$dir = yii::$app->basePath . '/modules';
$controllers = glob($dir . '/*');
foreach ($controllers as $k => $value) {
$controllers[$k] = $value . '/controllers/OrmController.php';
$controllers_name[$k] = substr($value, strrpos($value, '/') + 1);
}
$permissions = [];
foreach ($controllers as $k => $controller) {
$content = file_get_contents($controller);
//正则匹配拿到控制器名称，但我们一般都是Orm
preg_match('/class ([a-zA-Z]+)Controller/', $content, $match);
$cName = $match[1];
$permissions[] = strtolower($controllers_name[$k] . '/' . $cName . '/*');
$permissions[] = strtolower($controllers_name[$k] . '/' . $cName . '/index');
$permissions[] = strtolower($controllers_name[$k] . '/' . $cName . '/create');
$permissions[] = strtolower($controllers_name[$k] . '/' . $cName . '/update');
$permissions[] = strtolower($controllers_name[$k] . '/' . $cName . '/options');
//正则找方法
preg_match_all('/public function action([a-zA-Z_]+)/', $content, $matches);
foreach ($matches[1] as $aName) {
$permissions[] = strtolower($controllers_name[$k] . '/' . $cName . '/' . $aName);
}
}
foreach ($permissions as $k => $v) {
if (substr($v, -2) === '/s') {
unset($permissions[$k]);
}
}
$permissions = array_values($permissions);
$auth = Yii::$app->authManager;
foreach ($permissions as $permission) {
if (!$auth->getPermission($permission)) {
$obj = $auth->createPermission($permission);
$obj->description = $permission;
$auth->add($obj);
}
}
$trans->commit();
return "import success";
} catch (\Exception $e) {
$trans->rollback();
return "import failed ";
}
}

控制器继承的公共控制器进行判断资源请求

$controller = $action->controller->module->id;//控制器名称
$actionName = $action->id;//方法名称
$method = Yii::$app->request->method;
if (Yii::$app->user->can($controller. '/orm/*')) {
return true;
}
if ($method == 'POST') {
if (!Yii::$app->user->can($controller . '/orm/create')) {
throw new UserException('请求不允许');
}
}
if ($method == 'GET') {
if (!Yii::$app->user->can($controller . '/orm/index')) {
throw new UserException('请求不允许');
}
}
if ($method == 'PATCH' || $method == 'PUT') {
if (!Yii::$app->user->can($controller . '/orm/update')) {
throw new Use
b59b
rException('请求不允许');
}
}
if (Yii::$app->user->can($controller . '/orm/' . $actionName)) {
return true;
}
return true;
throw new UserException('对不起，您没有访问' . $controller . '/' . $actionName . '的权限');

角色添加后的编辑怎么操作

public function actionEditrole($name)
{
if (Yii::$app->request->isPost) {
$authManager = Yii::$app->authManager;
$post=Yii::$app->request->post();
$role = $authManager->getRole($name);
$role->name = $post['name'];
$role->description = $post['description'];
if(!$authManager->update($name,$role)){
//$name：老名字 $role：新对象
throw new UserException('编辑失败');
};
return '编辑角色成功';
}
}