Go语言中的访问权限控制

import (
    "github.com/grouper/grouper"
)
func main() {
    // 创建一个角色
    role := grouper.NewRole("admin")
    // 添加权限
    role.Allow("read", "data")
    role.Allow("write", "data")
    // 创建一个用户
    user := grouper.NewUser("john")
    // 分配角色
    user.AddRole(role)
    // 检查用户是否有访问权限
    if user.HasPermission("read", "data") {
        // 授予访问权限
    } else {
        // 拒绝访问权限
    }
}

import (
    "github.com/casbin/casbin"
)
func main() {
    // 创建一个执行器
    enforcer := casbin.NewEnforcer("model.conf", "policy.csv")
    // 检查用户是否有访问权限
    if enforcer.Enforce("john", "data", "read") {
        // 授予访问权限
    } else {
        // 拒绝访问权限
    }
}

import (
    "github.com/getsentry/sentry-go"
)
func main() {
    // 连接到 Sentry
    _ = sentry.Init(sentry.ClientOptions{})
    // 向 Sentry 事件添加用户上下文
    sentry.CaptureEvent(&sentry.Event{
        User: &sentry.User{
            ID:       "john",
            Username: "john@example.com",
        },
    })
}

go get github.com/casbin/casbin/v2

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act

adapter := xormadapter.NewAdapter("mysql", "root:123456@tcp(127.0.0.1:3306)/demo?charset=utf8mb4", true)
    enforcer := casbin.NewEnforcer("./rbac_models.conf", adapter)
    err := enforcer.LoadPolicy()
    if err != nil {
        logger.RLog.Error("enforcer load policy err", zap.Error(err))
    }

if ok := enforcer.AddPolicy(roleName, url, method); !ok {
  log.Fatal("添加权限失败")
} else {
  log.Fatal("添加权限成功")
}

if ok := enforcer.RemovePolicy(roleName, url, method); !ok {
  log.Fatal("删除权限失败")
} else {
  log.Fatal("删除权限成功")
}

func CheckPermission() echo.MiddlewareFunc {
    return func(handlerFunc echo.HandlerFunc) echo.HandlerFunc {
        return func(c echo.Context) error {
            obj := c.Request().URL.RequestURI()
            act := c.Request().Method
            sub := "admin"

            if ok := _casbin.Enforcer.Enforce(sub, obj, act); !ok {
                return c.JSON(http.StatusOK, _auth.PermissionInterception)
            }
            return handlerFunc(c)
        }
    }
}