1

app/admin/controller/RoleController.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace app\admin\controller;
+
+use app\admin\model\Permission;
+use app\admin\model\Role;
+use support\Request;
+
+class RoleController
+{
+    // 获取角色权限列表
+    public function permissions(Request $request, $id)
+    {
+        $role = Role::with('permissions')->findOrFail($id);
+        $allPermissions = Permission::all();
+
+        return json([
+            'code' => 0,
+            'data' => [
+                'role' => $role,
+                'all_permissions' => $allPermissions,
+                'assigned_permissions' => $role->permissions->pluck('id')->toArray()
+            ]
+        ]);
+    }
+
+    // 更新角色权限
+    public function updatePermissions(Request $request, $id)
+    {
+        $request->validate([
+            'permissions' => 'required|array',
+            'permissions.*' => 'exists:permissions,id'
+        ]);
+
+        $role = Role::findOrFail($id);
+        $role->permissions()->sync($request->input('permissions'));
+
+        return json(['code' => 0, 'msg' => '权限更新成功']);
+    }
+}

app/admin/controller/UserController.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace app\admin\controller;
+
+use support\Request;
+use app\model\User;
+use app\admin\model\Role;
+
+class UserController
+{
+    // 获取用户角色列表
+    public function roles(Request $request, $id)
+    {
+        $user = User::with('roles')->findOrFail($id);
+        $allRoles = Role::all();
+
+        return json([
+            'code' => 0,
+            'data' => [
+                'user' => $user,
+                'all_roles' => $allRoles,
+                'assigned_roles' => $user->roles->pluck('id')->toArray()
+            ]
+        ]);
+    }
+
+    // 更新用户角色
+    public function updateRoles(Request $request, $id)
+    {
+        $request->validate([
+            'roles' => 'required|array',
+            'roles.*' => 'exists:roles,id'
+        ]);
+
+        $user = User::findOrFail($id);
+        $user->roles()->sync($request->input('roles'));
+
+        return json(['code' => 0, 'msg' => '角色更新成功']);
+    }
+}

app/admin/controller/menus.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace app\admin\controller;
+
+class menus
+{
+    public function menus(Request $request)
+    {
+        $user = $request->user();
+        $menus = Menu::with('children')
+            ->where('parent_id', 0)
+            ->where('status', 1)
+            ->orderBy('sort')
+            ->get()
+            ->filter(function($menu) use ($user) {
+                if (empty($menu->permission_slug)) {
+                    return true;
+                }
+                return $user->hasPermission($menu->permission_slug);
+            });
+
+        return json($menus);
+    }
+}

app/admin/middleware/PermissionCheck.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace app\admin\middleware;
+
+use Webman\MiddlewareInterface;
+use Webman\Http\Response;
+use Webman\Http\Request;
+
+class PermissionCheck implements MiddlewareInterface
+{
+    public function process(Request $request, callable $handler): Response
+    {
+        $user = $request->user();
+        $route = $request->route;
+
+        // 检查角色
+        $roles = $route->param('roles');
+        if ($roles && !$user->roles()->whereIn('name', (array)$roles)->exists()) {
+            return json(['code' => 403, 'msg' => '需要特定角色才能访问']);
+        }
+
+        // 检查权限
+        $permission = $route->param('permission');
+        if ($permission && !$user->hasPermission($permission)) {
+            return json(['code' => 403, 'msg' => '无权访问']);
+        }
+
+        return $handler($request);
+    }
+}

app/admin/model/Menu.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace app\admin\model;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Menu extends Model
+{
+    protected $table = 'menus';
+
+    public function children()
+    {
+        return $this->hasMany(Menu::class, 'parent_id')->orderBy('sort');
+    }
+}

app/admin/model/Permission.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace app\admin\model;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Permission extends Model
+{
+    protected $table = 'permissions';
+
+    public function roles()
+    {
+        return $this->belongsToMany(Role::class, 'role_permissions', 'permission_id', 'role_id');
+    }
+}

app/admin/model/Role.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace app\admin\model;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Role extends Model
+{
+    protected $table = 'roles';
+
+    public function users()
+    {
+        return $this->belongsToMany(User::class, 'user_roles', 'role_id', 'user_id');
+    }
+
+    public function permissions()
+    {
+        return $this->belongsToMany(Permission::class, 'role_permissions', 'role_id', 'permission_id');
+    }
+}

app/admin/model/User.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace app\admin\model;
+
+use Illuminate\Database\Eloquent\Model;
+class User extends Model
+{
+    protected $table = 'users';
+    protected $hidden = ['password'];
+
+    public function roles()
+    {
+        return $this->belongsToMany(Role::class, 'user_roles', 'user_id', 'role_id');
+    }
+
+    public function hasRole($role)
+    {
+        return $this->roles()->where('name', $role)->exists();
+    }
+
+    public function hasPermission($permission)
+    {
+        return $this->roles()
+            ->whereHas('permissions', function($query) use ($permission) {
+                $query->where('slug', $permission);
+            })
+            ->exists();
+    }
+}