Django 自定义权限管理系统详解(通过中间件认证)
1. 创建工程文件, 修改setting.py文件
django-admin.py startproject project_name
特别是在 windows 上,如果报错,尝试用 django-admin 代替 django-admin.py 试试
setting.py 最终的配置文件
import os import sys # Build paths inside the project like this: os.path.join(BASE_DIR, ...) BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__))) sys.path.insert(0,os.path.join(BASE_DIR,"apps")) # Quick-start development settings - unsuitable for production # See https://docs.djangoproject.com/en/dev/howto/deployment/checklist/ # SECURITY WARNING: keep the secret key used in production secret! SECRET_KEY = '!g%gzw+-t8*+c2irzcm=r_#*x$q^(x-(^prn7wpnph3w#j$1gl' # SECURITY WARNING: don't run with debug turned on in production! DEBUG = True ALLOWED_HOSTS = [] # Application definition INSTALLED_APPS = [ 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', 'apps.system', ] MIDDLEWARE = [ 'django.middleware.security.SecurityMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', # 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', 'libs.middleware.permission.permissionMiddleware' ] ROOT_URLCONF = 'iFactory.urls' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [os.path.join(BASE_DIR, 'templates')], 'APP_DIRS': True, 'OPTIONS': { 'context_processors': [ 'django.template.context_processors.debug', 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', ], }, }, ] WSGI_APPLICATION = 'iFactory.wsgi.application' # Database # https://docs.djangoproject.com/en/dev/ref/settings/#databases DATABASES = { 'default': { 'ENGINE': 'django.db.backends.postgresql_psycopg2', 'NAME': "iFactory", 'USER': "postgres", 'PASSWORD': "postgres", 'HOST': "127.0.0.1", 'PORT': "5432", 'CONN_MAX_AGE': 5, } } # Password validation # https://docs.djangoproject.com/en/dev/ref/settings/#auth-password-validators AUTH_PASSWORD_VALIDATORS = [ { 'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator', }, { 'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator', }, { 'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator', }, { 'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator', }, ] # Internationalization # https://docs.djangoproject.com/en/dev/topics/i18n/ LANGUAGE_CODE = 'zh_Hans' TIME_ZONE = 'Asia/Shanghai' USE_I18N = True USE_L10N = True USE_TZ = True # Static files (CSS, JavaScript, Images) # https://docs.djangoproject.com/en/dev/howto/static-files/ STATIC_URL = '/static/' STATICFILES_DIRS = ( os.path.join(BASE_DIR, 'static'), ) # Session setting SESSION_COOKIE_AGE = 30 * 60 SESSION_ENGINE = 'django.contrib.sessions.backends.cache' # session_permisson_key SESSION_PERMISSION_URL_KEY = "perUrl" SESSION_MENU_KEY = "menu" MENU_ALL = "menuAll" MENU_PERMISSON = "menuPer" # permisson LOGIN_URL = '/login/' REGEX_URL = r'^{url}$' # url作严格匹配 SAFE_URL = [ '/login/', ]
2. 根目录创建apps文件夹(python包文件夹),创建应用system, 把应用放入到apps文件夹中
python manage.py startapp system, 在setting中的INSTALLED_APPS中添加对应的app
最终的目录结构
5. 建立userService.py文件(文件位置看上图目录),代码如下:
from ..models import Menu def init_user_permission(request, user): ''' 查询出用户的所有权限,进行分类写入session进行保存 :param request: :param user: :return: ''' # 查询出用户的所有权限 permisson_item_list = user.roles.values('permissons__title', 'permissons__url', 'permissons__menu_id' ).distinct() permisson_url_list = [] permisson_menu_list = [] all_menu_list = list(Menu.objects.values("id", "title", "parent_id")) for permission_item in permisson_item_list: permisson_url_list.append(permission_item["permissons__url"]) if permission_item["permissons__menu__id"]: temp = { "title": permission_item["permissons__title"], "url": permission_item["permissons__url"], "menu_id": permission_item["permissons__menu_id"] } permisson_menu_list.append(temp) # 写入session from django.conf import settings request.session[settings.SESSION_PERMISSION_URL_KEY] = permisson_url_list request.session[settings.SESSION_MENU_KEY] = { settings.MENU_ALL: all_menu_list, settings.MENU_PERMISSON: permisson_menu_list, }
6. 建立views_user.py 文件:
#-*-coding:utf-8-*- from django.shortcuts import render from django.http import JsonResponse, HttpResponse from apps.system.services import userService from apps.system.models import User def user_login(request): ''' 用户登录 :param request: :return: ''' if request.method == "GET": return render(request, "login.html") else: res = {} username = request.POST.get("username") password = request.POST.get("password") user = User.objects.filter(username=username, password=password).first() if not user: res["status"]= "false" else: userService.init_user_permission(request, user) return JsonResponse(res)
注意: 以上的setting.py 增加的配置:
MIDDLEWARE = [ 'django.middleware.security.SecurityMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', # 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', 'libs.middleware.permission.permissionMiddleware' ]
# Session setting SESSION_COOKIE_AGE = 30 * 60 SESSION_ENGINE = 'django.contrib.sessions.backends.cache' # session_permisson_key SESSION_PERMISSION_URL_KEY = "perUrl" SESSION_MENU_KEY = "menu" MENU_ALL = "menuAll" MENU_PERMISSON = "menuPer" # permisson LOGIN_URL = '/login/' REGEX_URL = r'^{url}$' # url作严格匹配 SAFE_URL = [ '/login/', ]
以上这篇Django 自定义权限管理系统详解(通过中间件认证)就是小编分享给大家的全部内容了,希望能给大家一个参考,也希望大家多多支持来客网。