go web 权限管理 简单例子 (面向对象权限 ABAC / Casbin)
说明

ABAC
调用 github.com/casbin/casbin

abac_model.conf

[request_definition]r = sub, obj, act[policy_definition]p = sub, obj,act[policy_effect]e = some(where (p.eft == allow))[matchers]m = r.sub.App == r.obj.App && r.sub.Type == r.obj.Type && r.sub.Method == r.obj.Methodmain.go

package mainimport ( "fmt" "github.com/casbin/casbin")type User struct { Id int UserName string Group []Group}type Group struct { Id int Name string App string // app Type string // 类型 Method string // 方法 Priority int // 优先级}type Obj struct { App string // app Type string // 类型 Method string // 方法}func main() { e := casbin.NewEnforcer("E:\\go-test\\test\\abac\\abac_model.conf") group1 := Group{ Name: "group1", App: "asset", Type: "aliyun", Method: "Get", Priority: 100, } group2 := Group{ Name: "group2", App: "asset", Type: "aliyun", Method: "Get", Priority: 100, } // 用户 hequan 属于 group1 , group2 user1 := User{ UserName: "hequan", Group: []Group{group1, group2}, } obj := Obj{ App: "asset", Type: "aliyun", Method: "Get", } var perms = false // 检查 用户 hequan 所有的组 是否有权限 for _, v := range user1.Group { if e.Enforce(v, obj, ""){ perms = true break } } if perms { fmt.Println("权限正常") } else { fmt.Println("没有权限") }}结果

权限正常