34 lines
1.1 KiB
Go
34 lines
1.1 KiB
Go
|
package initialization
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"fmt"
|
|||
|
|
"github.com/casbin/casbin/v2"
|
|||
|
|
"github.com/casbin/casbin/v2/model"
|
|||
|
|
gormAdapter "github.com/casbin/gorm-adapter/v3"
|
|||
|
|
"go_api_tmpl/global"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
// Casbin 初始化Casbin的RABC模型
|
|||
|
|
func Casbin() {
|
|||
|
|
// Initialize casbin adapter
|
|||
|
|
adapter, err := gormAdapter.NewAdapterByDBUseTableName(global.MySQLConn, "", "t_role_rule")
|
|||
|
|
if err != nil {
|
|||
|
|
panic(fmt.Sprintf("failed to initialize casbin adapter: %v", err))
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 初始化模型
|
|||
|
|
model := model.NewModel()
|
|||
|
|
model.AddDef("r", "r", "sub, obj, act")
|
|||
|
|
model.AddDef("p", "p", "sub, obj, act")
|
|||
|
|
model.AddDef("g", "g", "_, _")
|
|||
|
|
model.AddDef("e", "e", "some(where (p.eft == allow))")
|
|||
|
|
// 匹配规则(下面的规则适用与根据Gin的Route的Path和Method做校验，最后那个r.sub == 1是用来判断超级管理员的)
|
|||
|
|
model.AddDef("m", "m", "g(r.sub, p.sub) && keyMatch2(r.obj, p.obj) && regexMatch(r.act, p.act) || r.sub == \"1\"")
|
|||
|
|
|
|||
|
|
enf, err := casbin.NewEnforcer(model, adapter)
|
|||
|
|
if err != nil {
|
|||
|
|
panic(fmt.Sprintf("failed to create casbin enforcer: %v", err))
|
|||
|
|
}
|
|||
|
|
global.Enforcer = enf
|
|||
|
|
}
|