Django中多用户角色和权限管理的实现步骤

from django.db import models
class Role(models.Model):
    name = models.CharField(max_length=50, unique=True)
    # 其他字段...

from django.contrib.auth.models import AbstractUser
class User(AbstractUser):
    role = models.ForeignKey(Role, on_delete=models.CASCADE)
    # 其他字段...

class Permission(models.Model):
    name = models.CharField(max_length=50, unique=True)
    # 其他字段...

class RolePermission(models.Model):
    role = models.ForeignKey(Role, on_delete=models.CASCADE)
    permission = models.ForeignKey(Permission, on_delete=models.CASCADE)
    # 其他字段...

from functools import wraps
from django.http import HttpResponseForbidden
def has_permission(permission_name):
    def decorator(view_func):
        @wraps(view_func)
        def wrapper(request, *args, **kwargs):
            user = request.user
            if not user.has_permission(permission_name):
                return HttpResponseForbidden()
            return view_func(request, *args, **kwargs)
        return wrapper
    return decorator

@has_permission('edit_post')
def edit_post(request, post_id):
    # 执行编辑帖子的逻辑...