roles bug

[owen-gxz]

I want to generate permissions through the directory my login user roles： [complaint_type_read locale_admin complaint_type_add locale_reader complaint_type_edit global_admin complaint_type_delete] more menu errors：

roles code：

for _, rs := range CmsRoles {
        for _, ts := range CmsTemp {
            // fmt.Println(rs, ts)
            crl := cms.CmsUserRoleList{}
            switch rs {
            case "read":
                crl.Name = fmt.Sprintf("%s%s", ts.Name, "查看")
            case "edit":
                crl.Name = fmt.Sprintf("%s%s", ts.Name, "更新")
            case "delete":
                crl.Name = fmt.Sprintf("%s%s", ts.Name, "删除")
            case "add":
                crl.Name = fmt.Sprintf("%s%s", ts.Name, "增加")
            }
            crl.Value = fmt.Sprintf("%s_%s", ts.Value, rs)
            err := db.Where(crl).FirstOrCreate(&crl).Error
            if err != nil {
                panic(err)
            }
            setRoles(crl.Value, db)
        }
    }

UserTmpl:

type UserTmpl struct {
    Name  string
    Value string
}

[owen-gxz]

func setRoles(r string, db *gorm.DB) {
    roles.Register(r, func(req *http.Request, currentUser interface{}) bool {
        u := currentUser.(*cms.User)
        if u.RoleID == 0 {
            return false
        }
        // fmt.Println(fmt.Sprintf("%#v", u))
        cmsR := &cms.CmsUserRole{}
        cmsUsers.Locker.Lock()
        if cmsUsers.Data[fmt.Sprintf("%d", u.ID)] == nil {
            newCUR := &cms.CmsUserRole{}
            err := db.Model(newCUR).Preload("CmsUserRoleList").First(newCUR, u.RoleID).Error
            if err != nil {
                return false
            }
            cmsR = newCUR
            cmsUsers.Data[fmt.Sprintf("%d", u.ID)] = newCUR
        } else {
            cmsR = cmsUsers.Data[fmt.Sprintf("%d", u.ID)]
        }
        cmsUsers.Locker.Unlock()
        for _, i := range cmsR.CmsUserRoleList {
            if i.Value == r {
                return true
            }
        }
        return false
    })

}

[azumads]

你需要给resource指定具体的权限 Admin.AddResource(&models.News{}, &admin.Config{Name: "Sport", Priority: 1, Menu: []string{"新闻"}, Permission: roles.Deny(roles.CRUD, "locale_reader")})

[owen-gxz]

我所有的都指定了。。但是有的是正确的有的无效

QorAdmin.AddResource(&model.NewsType{}, &admin.Config{
        Permission: roles.Allow(roles.Read, helpers.CmsAdmin, getRole(newsTypeRole, roleRead)).
            Allow(roles.Update, helpers.CmsAdmin, getRole(newsTypeRole, roleEdit)).
            Allow(roles.Delete, helpers.CmsAdmin, getRole(newsTypeRole, roleDelete)).
            Allow(roles.Create, helpers.CmsAdmin, getRole(newsTypeRole, roleAdd)),
        Menu: []string{"新闻管理"}, Name: "新闻类型管理", IconName: "merge_type",
    })

[azumads]

你的程序有点复杂，建议你在roles.Register方法里debug一下，看看每次用户是哪个role，一个用户只能命中一个role

[owen-gxz]

我使用

func(c *admin.Context) {
        fmt.Println(c.Roles)
}

获取到的权限列表是正确的，但是页面展示及操作会有问题，有一部分是好的，一部分是错误的