检查用户权限以执行某些操作


check user rights to do something

我正在创建laravel上的用户权限。在我的数据库中,我有一个id为/user_id/model/write/read/delete 的表

最后三个权限是枚举类型:开和关。

在我的用户模型中,我编写了要设置的方法:

protected $models   = ['dashboard', 'preferences'];  
public function setPermissions($input=false)             
    {
        foreach($this->models as $model) {
            $read   = (isset($input[$model]['read']) ? 'on' : 'off');
            $write  = (isset($input[$model]['write']) ? 'on' : 'off');
            $delete = (isset($input[$model]['delete']) ? 'on' : 'off');
            $perms          = Permissions::firstOrNew([
                'user_id'   => $this->id,
                'model'     => $model,
            ]);
            $perms->read    = $read;
            $perms->write   = $write;
            $perms->delete  = $delete;
            $perms->save();
        }
    }

在权限模型中im write:

 use Illuminate'Database'Eloquent'SoftDeletingTrait;
class Permissions extends Eloquent {
    use SoftDeletingTrait;
    protected $table    = 'user_permissions';
    protected $fillable = ['user_id', 'model', 'read', 'write', 'delete'];
    public function user() 
    {
        return $this->belongsTo('User','user_id','id');
    }
}

好的,我有一个如何从设置表单设置权限的方法。现在我需要检查用户是否有权限写或读,删除并做一些类似的事情:

if (Auth::user->hasRights('write', 'delete'))
          //do something

请帮助我如何从数据库权限中进行选择,并使用hasRight方法检查用户权限。

我认为需要检查数据库的用户权限是否在数组中。这应该是什么样子?

也许你能给我的setPermission方法的小代码吗?感谢u

// in User model
public function hasRights(...$accessLevels)
{
    return ! $this->permissions()->filter(function (Permissions $p) use ($accessLevels) {
        foreach ($accessLevels as $access) {
            if ( ! $p->{$access}) return false;
        }
        return true;
    })->isEmpty();
}