Django 自定义权限管理系统详解(通过中间件认证)

1. 创建工程文件， 修改setting.py文件

django-admin.py startproject project_name

特别是在 windows 上，如果报错，尝试用 django-admin 代替 django-admin.py 试试

setting.py 最终的配置文件

import osimport sys# Build paths inside the project like this: os.path.join(BASE_DIR, ...)BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))sys.path.insert(0,os.path.join(BASE_DIR,'apps')) # Quick-start development settings - unsuitable for production# See https://docs.djangoproject.com/en/dev/howto/deployment/checklist/ # SECURITY WARNING: keep the secret key used in production secret!SECRET_KEY = ’!g%gzw+-t8*+c2irzcm=r_#*x$q^(x-(^prn7wpnph3w#j$1gl’ # SECURITY WARNING: don’t run with debug turned on in production!DEBUG = TrueALLOWED_HOSTS = [] # Application definitionINSTALLED_APPS = [ ’django.contrib.admin’, ’django.contrib.auth’, ’django.contrib.contenttypes’, ’django.contrib.sessions’, ’django.contrib.messages’, ’django.contrib.staticfiles’, ’apps.system’,] MIDDLEWARE = [ ’django.middleware.security.SecurityMiddleware’, ’django.contrib.sessions.middleware.SessionMiddleware’, ’django.middleware.common.CommonMiddleware’, # ’django.middleware.csrf.CsrfViewMiddleware’, ’django.contrib.auth.middleware.AuthenticationMiddleware’, ’django.contrib.messages.middleware.MessageMiddleware’, ’django.middleware.clickjacking.XFrameOptionsMiddleware’, ’libs.middleware.permission.permissionMiddleware’] ROOT_URLCONF = ’iFactory.urls’ TEMPLATES = [ { ’BACKEND’: ’django.template.backends.django.DjangoTemplates’, ’DIRS’: [os.path.join(BASE_DIR, ’templates’)], ’APP_DIRS’: True, ’OPTIONS’: { ’context_processors’: [’django.template.context_processors.debug’,’django.template.context_processors.request’,’django.contrib.auth.context_processors.auth’,’django.contrib.messages.context_processors.messages’, ], }, },] WSGI_APPLICATION = ’iFactory.wsgi.application’ # Database# https://docs.djangoproject.com/en/dev/ref/settings/#databasesDATABASES = { ’default’: { ’ENGINE’: ’django.db.backends.postgresql_psycopg2’, ’NAME’: 'iFactory', ’USER’: 'postgres', ’PASSWORD’: 'postgres', ’HOST’: '127.0.0.1', ’PORT’: '5432', ’CONN_MAX_AGE’: 5, }} # Password validation# https://docs.djangoproject.com/en/dev/ref/settings/#auth-password-validatorsAUTH_PASSWORD_VALIDATORS = [ { ’NAME’: ’django.contrib.auth.password_validation.UserAttributeSimilarityValidator’, }, { ’NAME’: ’django.contrib.auth.password_validation.MinimumLengthValidator’, }, { ’NAME’: ’django.contrib.auth.password_validation.CommonPasswordValidator’, }, { ’NAME’: ’django.contrib.auth.password_validation.NumericPasswordValidator’, },] # Internationalization# https://docs.djangoproject.com/en/dev/topics/i18n/LANGUAGE_CODE = ’zh_Hans’TIME_ZONE = ’Asia/Shanghai’USE_I18N = TrueUSE_L10N = TrueUSE_TZ = True # Static files (CSS, JavaScript, Images)# https://docs.djangoproject.com/en/dev/howto/static-files/STATIC_URL = ’/static/’STATICFILES_DIRS = ( os.path.join(BASE_DIR, ’static’), ) # Session settingSESSION_COOKIE_AGE = 30 * 60SESSION_ENGINE = ’django.contrib.sessions.backends.cache’ # session_permisson_keySESSION_PERMISSION_URL_KEY = 'perUrl'SESSION_MENU_KEY = 'menu'MENU_ALL = 'menuAll'MENU_PERMISSON = 'menuPer' # permissonLOGIN_URL = ’/login/’REGEX_URL = r’^{url}$’ # url作严格匹配SAFE_URL = [ ’/login/’,]

2. 根目录创建apps文件夹（python包文件夹），创建应用system， 把应用放入到apps文件夹中

python manage.py startapp system， 在setting中的INSTALLED_APPS中添加对应的app

最终的目录结构

3. 修改system/model.py 文件

#-*-coding:utf-8-*-from django.db import models # Create your models here.class Menu(models.Model): ’’’ 菜单 ’’’ title = models.CharField(max_length=32, unique=True) parent = models.ForeignKey('Menu', null=True, blank=True) def __str__(self): # 显示层级菜单 title_list = [self.title] p = self.parent while p: title_list.insert(0, p.title) p = p.parent return ’-’.join(title_list) class Permission(models.Model): ’’’ 权限 ’’’ title = models.CharField(max_length=32, unique=True) url = models.CharField(max_length=128, unique=True) menu = models.ForeignKey('Menu', null=True, blank=True) # 定义菜单间的自引用关系 # 权限url 在 菜单下；菜单可以有父级菜单；还要支持用户创建菜单，因此需要定义parent字段（parent_id） # blank=True 意味着在后台管理中填写可以为空，根菜单没有父级菜单 def __str__(self): # 显示带菜单前缀的权限 return ’{menu}---{permission}’.format(menu=self.menu, permission=self.title) class Role(models.Model): ’’’ 角色：绑定权限 ’’’ title = models.CharField(max_length=32, unique=True) # 定义角色和权限的多对多关系 permissions = models.ManyToManyField('Permission') def __str__(self): return self.titleclass User(models.Model): ’’’ 用户 -- 角色划分 ’’’ username = models.CharField(max_length=32) password = models.CharField(max_length=32) phone = models.CharField(max_length=11) email = models.EmailField() is_admin = models.BooleanField(default=False) is_push_email = models.BooleanField(default=True) is_push_phone = models.BooleanField(default=True) # create_datetime = models.DateTimeField(auto_now_add=True) # 定义用户和角色的多对多关系 roles = models.ManyToManyField('Role') def __str__(self): return ’{username}---{phone}’ ’’.format(username=self.username, phone=self.phone)

4. 数据库迁移

执行 python manage.py makemigrations system

执行python manage.py migrate system

5. 建立userService.py文件（文件位置看上图目录），代码如下：

from ..models import Menu def init_user_permission(request, user): ’’’ 查询出用户的所有权限，进行分类写入session进行保存 :param request: :param user: :return: ’’’ # 查询出用户的所有权限 permisson_item_list = user.roles.values(’permissons__title’, ’permissons__url’, ’permissons__menu_id’ ).distinct() permisson_url_list = [] permisson_menu_list = [] all_menu_list = list(Menu.objects.values('id', 'title', 'parent_id')) for permission_item in permisson_item_list: permisson_url_list.append(permission_item['permissons__url']) if permission_item['permissons__menu__id']: temp = {'title': permission_item['permissons__title'],'url': permission_item['permissons__url'],'menu_id': permission_item['permissons__menu_id'] } permisson_menu_list.append(temp) # 写入session from django.conf import settings request.session[settings.SESSION_PERMISSION_URL_KEY] = permisson_url_list request.session[settings.SESSION_MENU_KEY] = { settings.MENU_ALL: all_menu_list, settings.MENU_PERMISSON: permisson_menu_list, }

6. 建立views_user.py 文件：

#-*-coding:utf-8-*-from django.shortcuts import renderfrom django.http import JsonResponse, HttpResponsefrom apps.system.services import userServicefrom apps.system.models import User def user_login(request): ’’’ 用户登录 :param request: :return: ’’’ if request.method == 'GET': return render(request, 'login.html') else: res = {} username = request.POST.get('username') password = request.POST.get('password') user = User.objects.filter(username=username, password=password).first() if not user: res['status']= 'false' else: userService.init_user_permission(request, user) return JsonResponse(res)

注意： 以上的setting.py 增加的配置：

MIDDLEWARE = [ ’django.middleware.security.SecurityMiddleware’, ’django.contrib.sessions.middleware.SessionMiddleware’, ’django.middleware.common.CommonMiddleware’, # ’django.middleware.csrf.CsrfViewMiddleware’, ’django.contrib.auth.middleware.AuthenticationMiddleware’, ’django.contrib.messages.middleware.MessageMiddleware’, ’django.middleware.clickjacking.XFrameOptionsMiddleware’, ’libs.middleware.permission.permissionMiddleware’]

# Session settingSESSION_COOKIE_AGE = 30 * 60SESSION_ENGINE = ’django.contrib.sessions.backends.cache’ # session_permisson_keySESSION_PERMISSION_URL_KEY = 'perUrl'SESSION_MENU_KEY = 'menu'MENU_ALL = 'menuAll'MENU_PERMISSON = 'menuPer' # permissonLOGIN_URL = ’/login/’REGEX_URL = r’^{url}$’ # url作严格匹配SAFE_URL = [ ’/login/’,]

以上这篇Django 自定义权限管理系统详解(通过中间件认证)就是小编分享给大家的全部内容了，希望能给大家一个参考，也希望大家多多支持好吧啦网。