118 lines
3.0 KiB
Python
118 lines
3.0 KiB
Python
|
"""
|
|||
|
|
@project: qabot
|
|||
|
|
@Author：虎虎
|
|||
|
|
@file： permission_constants.py
|
|||
|
|
@date：2023/9/13 18:23
|
|||
|
|
@desc: 权限,角色 常量
|
|||
|
|
"""
|
|||
|
|
from enum import Enum
|
|||
|
|
from typing import List
|
|||
|
|
|
|||
|
|
from django.utils.translation import gettext_lazy as _
|
|||
|
|
|
|||
|
|
|
|||
|
|
class Group(Enum):
|
|||
|
|
"""
|
|||
|
|
权限组 一个组一般对应前端一个菜单
|
|||
|
|
"""
|
|||
|
|
USER = "USER"
|
|||
|
|
|
|||
|
|
|
|||
|
|
class Operate(Enum):
|
|||
|
|
"""
|
|||
|
|
一个权限组的操作权限
|
|||
|
|
"""
|
|||
|
|
READ = 'READ'
|
|||
|
|
EDIT = "EDIT"
|
|||
|
|
CREATE = "CREATE"
|
|||
|
|
DELETE = "DELETE"
|
|||
|
|
|
|||
|
|
|
|||
|
|
class RoleGroup(Enum):
|
|||
|
|
# 系统用户
|
|||
|
|
SYSTEM_USER = "SYSTEM_USER"
|
|||
|
|
# 对话用户
|
|||
|
|
CHAT_USER = "CHAT_USER"
|
|||
|
|
|
|||
|
|
|
|||
|
|
class Role:
|
|||
|
|
def __init__(self, name: str, decs: str, group: RoleGroup):
|
|||
|
|
self.name = name
|
|||
|
|
self.decs = decs
|
|||
|
|
self.group = group
|
|||
|
|
|
|||
|
|
|
|||
|
|
class RoleConstants(Enum):
|
|||
|
|
ADMIN = Role(_("ADMIN"), _('Super administrator'), RoleGroup.SYSTEM_USER)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class Permission:
|
|||
|
|
"""
|
|||
|
|
权限信息
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
def __init__(self, group: Group, operate: Operate, roles=None, dynamic_tag=None):
|
|||
|
|
if roles is None:
|
|||
|
|
roles = []
|
|||
|
|
self.group = group
|
|||
|
|
self.operate = operate
|
|||
|
|
self.roleList = roles
|
|||
|
|
self.dynamic_tag = dynamic_tag
|
|||
|
|
|
|||
|
|
def __str__(self):
|
|||
|
|
return self.group.value + ":" + self.operate.value + (
|
|||
|
|
(":" + self.dynamic_tag) if self.dynamic_tag is not None else '')
|
|||
|
|
|
|||
|
|
def __eq__(self, other):
|
|||
|
|
return str(self) == str(other)
|
|||
|
|
|
|||
|
|
|
|||
|
|
class PermissionConstants(Enum):
|
|||
|
|
"""
|
|||
|
|
权限枚举
|
|||
|
|
"""
|
|||
|
|
USER_READ = Permission(group=Group.USER, operate=Operate.READ, roles=[RoleConstants.ADMIN])
|
|||
|
|
USER_EDIT = Permission(group=Group.USER, operate=Operate.EDIT, roles=[RoleConstants.ADMIN])
|
|||
|
|
USER_DELETE = Permission(group=Group.USER, operate=Operate.DELETE, roles=[RoleConstants.ADMIN])
|
|||
|
|
|
|||
|
|
|
|||
|
|
def get_permission_list_by_role(role: RoleConstants):
|
|||
|
|
"""
|
|||
|
|
根据角色 获取角色对应的权限
|
|||
|
|
:param role: 角色
|
|||
|
|
:return: 权限
|
|||
|
|
"""
|
|||
|
|
return list(map(lambda k: PermissionConstants[k],
|
|||
|
|
list(filter(lambda k: PermissionConstants[k].value.roleList.__contains__(role),
|
|||
|
|
PermissionConstants.__members__))))
|
|||
|
|
|
|||
|
|
|
|||
|
|
class Auth:
|
|||
|
|
"""
|
|||
|
|
用于存储当前用户的角色和权限
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
def __init__(self, role_list: List[RoleConstants], permission_list: List[PermissionConstants | Permission]
|
|||
|
|
, client_id, client_type, current_role: RoleConstants, **keywords):
|
|||
|
|
self.role_list = role_list
|
|||
|
|
self.permission_list = permission_list
|
|||
|
|
self.client_id = client_id
|
|||
|
|
self.client_type = client_type
|
|||
|
|
self.keywords = keywords
|
|||
|
|
self.current_role = current_role
|
|||
|
|
|
|||
|
|
|
|||
|
|
class CompareConstants(Enum):
|
|||
|
|
# 或者
|
|||
|
|
OR = "OR"
|
|||
|
|
# 并且
|
|||
|
|
AND = "AND"
|
|||
|
|
|
|||
|
|
|
|||
|
|
class ViewPermission:
|
|||
|
|
def __init__(self, roleList: List[RoleConstants], permissionList: List[PermissionConstants | object],
|
|||
|
|
compare=CompareConstants.OR):
|
|||
|
|
self.roleList = roleList
|
|||
|
|
self.permissionList = permissionList
|
|||
|
|
self.compare = compare
|