`id` int(11) unsigned NOT NULL AUTO_INCREMENT,
`name` varchar(20) NOT NULL COMMENT '角色名稱',
`pid` smallint(6) DEFAULT NULL COMMENT '父角色I(xiàn)D',
`rule_name` text COMMENT '規(guī)則唯一英文標(biāo)識(shí),全小寫(xiě)',
`type` varchar(50) DEFAULT '' COMMENT '權(quán)限規(guī)則分類(lèi)，請(qǐng)加應(yīng)用前綴,如admin_',
`status` tinyint(1) unsigned DEFAULT NULL COMMENT '狀態(tài)',
`remark` varchar(255) DEFAULT NULL COMMENT '備注',
`create_time` int(11) unsigned NOT NULL DEFAULT '0' COMMENT '創(chuàng)建時(shí)間',
`update_time` int(11) unsigned NOT NULL DEFAULT '0' COMMENT '更新時(shí)間',
`listorder` int(3) NOT NULL DEFAULT '0' COMMENT '排序字段',

`id` mediumint(8) unsigned NOT NULL AUTO_INCREMENT COMMENT '規(guī)則id,自增主鍵',
`module` varchar(20) NOT NULL COMMENT '規(guī)則所屬module',
`type` varchar(30) NOT NULL DEFAULT '1' COMMENT '權(quán)限規(guī)則分類(lèi)，請(qǐng)加應(yīng)用前綴,如admin_',
`name` varchar(255) NOT NULL DEFAULT '' COMMENT '規(guī)則唯一英文標(biāo)識(shí),全小寫(xiě)',
`param` varchar(255) DEFAULT NULL COMMENT '額外url參數(shù)',
`title` varchar(20) NOT NULL DEFAULT '' COMMENT '規(guī)則中文描述',
`status` tinyint(1) NOT NULL DEFAULT '1' COMMENT '是否有效(0:無(wú)效,1:有效)',
`condition` varchar(300) NOT NULL DEFAULT '' COMMENT '規(guī)則附加條件',

`pools` varchar(20) DEFAULT '' COMMENT '權(quán)限池',
`roleId` smallint(5) NOT NULL DEFAULT '0' COMMENT '權(quán)限id',

class iAuth{
  public $user = null;
  //默認(rèn)配置
  protected $_config = array(
  );
  public function __construct() {
  }
  /**
   * 檢查權(quán)限
   * @param name string|array 需要驗(yàn)證的規(guī)則列表,支持逗號(hào)分隔的權(quán)限規(guī)則或索引數(shù)組
   * @param uid int      認(rèn)證用戶的id
   * @param relation string  如果為 'or' 表示滿足任一條規(guī)則即通過(guò)驗(yàn)證;如果為 'and'則表示需滿足所有規(guī)則才能通過(guò)驗(yàn)證
   * @return boolean      通過(guò)驗(yàn)證返回true;失敗返回false
   */
  public function check($uid,$name,$relation='or') {
    if(empty($uid)){
      return false;
    }
    if($uid==1){
      return true;
    }
    if (is_string($name)) {
      $name = strtolower($name);
      if (strpos($name, ',') !== false) {
        $name = explode(',', $name);
      } else {
        $name = array($name);
      }
    }
    $list = array(); //保存驗(yàn)證通過(guò)的規(guī)則名
    //獲取用戶信息
    $this->getUserInfo($uid);//獲取用戶信息,一維數(shù)組
    $groups= $this->user['roleId'];
    if(in_array(1, $groups)){
      return true;
    }
    if(empty($groups)){
      return false;
    }
    $rules = self::get_rules($this->user['roleId']);
    if(in_array($name,$rules))
    {
      return true;
    }
    return false;
  }
  /**
   * 獲得用戶資料
   */
  private function getUserInfo(&$uid) {
    if(!isset($this->user)){
      $user = new Users($uid);
      $this->user = $user->fields;
    }
    return $this->user;
  }
  /**
   * 獲取驗(yàn)證規(guī)則
   * @param int $id
   */
  public static function get_rules($id)
  {
    if(empty($id)) return false;
    $rules = Cache::get(self::$cache_prefix . $id);
    if(empty($rules))
    {
      $model = Db::name('role');
      $model->where('id',$id);
      $rules = $model->find();
      $rules['rule_name'] = explode(',',strtolower($rules['rule_name']));
      //設(shè)置緩存
      Cache::set(self::$cache_prefix,$rules);
    }
    return $rules;
  }
}

/**
 * 檢測(cè)用戶id
 * @param name string|array 需要驗(yàn)證的規(guī)則列表,支持逗號(hào)分隔的權(quán)限規(guī)則或索引數(shù)組
 * @param uid int      認(rèn)證用戶的id
 */
function sp_auth_check($uid, $name=null)
{
  if(empty($uid)) return false;
  if(empty($name)){
    $name=strtolower(MODULE_NAME."/".CONTROLLER_NAME."/".ACTION_NAME);
  }
  $iAuth_obj = new \app\Common\Lib\iAuth();
  return $iAuth_obj->check($uid);
}

class AdminbaseController extends Controller
{
  public $uid = 0;
  //用戶實(shí)例
  public $userObj = null;
  /**
   * 構(gòu)造函數(shù)
   * Adminbase constructor.
   */
  public function __construct()
  {
    parent::__construct();
  }
  public function _initialize()
  {
    $this->uid = Session::read('AdminId');
    if(!empty($this->uid ))
    {
      //檢測(cè)過(guò)已經(jīng)登錄了
      $this->userObj = Db::name('users')->where('uid',$this->uid)->find();
      if(!$this->check_access($this->uid))
      {
        $this->error("您沒(méi)有訪問(wèn)權(quán)限！",Url::build('admin/index/login'));
        exit();
      }
      $this->assign('admin',$this->userObj);
    }
    else
    {
      //沒(méi)有登錄的
      $this->error("您還沒(méi)有登錄！",Url::build('admin/index/login'));
      exit();
    }
  }
  /**
   * 檢測(cè)權(quán)限
   * @param $uid
   */
  private function check_access(&$uid)
  {
    if($uid == 1)
    {
      //超級(jí)管理員
      return true;
    }
    $request = Request::instance();
    //如果不是這個(gè)應(yīng)用池的賬戶也不通過(guò)
    $pools = explode(',',$this->userObj['pools']);
    if(!in_array(strtolower($request->module()), $pools))  return false;
    $rule = $request->module() . '_' . $request->controller() . '_' . $request->action() ;
    $no_need_check_rules = Config::get('inc_auth.no_need_check_rules');
    if(!in_array(strtolower($rule),$no_need_check_rules))
    {
      //驗(yàn)證權(quán)限
      return sp_auth_check($uid);
    }
    else
    {
      return true;
    }
  }
}

$config['no_need_check_rules'] = array('admin_index_index','admin_index_login');