实现一个简单权限判断系统。
用户数据：
```
$user = [
    'role' => 'editor',
    'status' => 'active',
    'level' => 3,
];
```
规则配置：
```
$permissions = [
    'post.create' => [
        ['field' => 'status', 'operator' => '=', 'value' => 'active'],
    ],
    'post.delete' => [
        ['field' => 'role', 'operator' => '=', 'value' => 'admin'],
        ['field' => 'level', 'operator' => '>=', 'value' => 5],
    ],
];
```
要求：
```
实现 can($user, $action, $permissions): bool
支持操作符：
	=
	!=
	>
	>=
	<
	<=
所有规则都满足才返回 true
未定义权限默认返回 false
```
练习点：
```
规则引擎
声明式权限
操作符映射
数据驱动逻辑
```

通过配置数组驱动权限判断。

代码
```
<?php

/**
 * 判断用户是否有权限
 */
function can(array $user, string $action, array $permissions): bool
{
    // 未定义权限，默认拒绝
    if (!isset($permissions[$action])) {
        return false;
    }

foreach ($permissions[$action] as $rule) {
        $field = $rule['field'];
        $operator = $rule['operator'];
        $expected = $rule['value'];
        $actual = $user[$field] ?? null;

if (!compareValue($actual, $operator, $expected)) {
            return false;
        }
    }

return true;
}

/**
 * 根据操作符比较值
 */
function compareValue(mixed $actual, string $operator, mixed $expected): bool
{
    return match ($operator) {
        '=' => $actual == $expected,
        '!=' => $actual != $expected,
        '>' => $actual > $expected,
        '>=' => $actual >= $expected,
        '<' => $actual < $expected,
        '<=' => $actual <= $expected,
        default => false,
    };
}

$user = [
    'role' => 'editor',
    'status' => 'active',
    'level' => 3,
];

$permissions = [
    'post.create' => [
        ['field' => 'status', 'operator' => '=', 'value' => 'active'],
    ],
    'post.delete' => [
        ['field' => 'role', 'operator' => '=', 'value' => 'admin'],
        ['field' => 'level', 'operator' => '>=', 'value' => 5],
    ],
];

var_dump(can($user, 'post.create', $permissions)); // true
var_dump(can($user, 'post.delete', $permissions)); // false
```

已有0条评论

添加新评论☺

如果认为本文对您有所帮助请赞助本站

支付宝扫一扫赞助

已有0条评论

添加新评论☺