140 lines
4.7 KiB
PHP
140 lines
4.7 KiB
PHP
<?php namespace Phpcmf\Model\Cms;
|
||
|
||
/**
|
||
* 内容权限（站点 / 模块 / 栏目）
|
||
* 调用：\Phpcmf\Service::M('member_auth', 'cms')
|
||
*/
|
||
class Member_auth extends \Phpcmf\Model {
|
||
|
||
public $auth;
|
||
public $auth_type;
|
||
public $is_category_public;
|
||
|
||
public function __construct() {
|
||
parent::__construct();
|
||
$this->_reload_auth();
|
||
}
|
||
|
||
// 每次从会员缓存重新读取，避免单例构造过早导致 auth 为空
|
||
protected function _reload_auth() {
|
||
$this->auth = isset(\Phpcmf\Service::C()->member_cache['auth2'][SITE_ID])
|
||
? \Phpcmf\Service::C()->member_cache['auth2'][SITE_ID] : [];
|
||
$auth_type = \Phpcmf\Service::C()->member_cache['auth_type'] ?? 0;
|
||
// [] / null / "" 都按全局 0 处理（dr_string2array("0") 会得到 []）
|
||
$this->auth_type = is_numeric($auth_type) ? intval($auth_type) : 0;
|
||
}
|
||
|
||
// 当前登录会员的权限标识
|
||
protected function _get_groupid($member) {
|
||
|
||
$auth_type = is_numeric($this->auth_type) ? intval($this->auth_type) : 0;
|
||
|
||
if ($auth_type == 1) {
|
||
$groupid = $member && !empty($member['groupid']) ? $member['groupid'] : [0];
|
||
} elseif ($auth_type == 2) {
|
||
$groupid = $member && !empty($member['authid']) ? $member['authid'] : [0];
|
||
} else {
|
||
$groupid = ['public'];
|
||
}
|
||
|
||
if (!is_array($groupid)) {
|
||
$groupid = [$groupid];
|
||
}
|
||
|
||
return $groupid ? array_values($groupid) : [0];
|
||
}
|
||
|
||
// 取某一 aid 下的栏目权限配置
|
||
protected function _category_auth_row($gid, $module, $catid) {
|
||
|
||
$mid = isset($module['dirname']) ? $module['dirname'] : '';
|
||
if (!$mid && defined('APP_DIR')) {
|
||
$mid = APP_DIR;
|
||
}
|
||
|
||
if (!empty($module['share'])) {
|
||
if (!empty($this->auth[$gid]['home']['is_category'])) {
|
||
$this->is_category_public = 0;
|
||
return isset($this->auth[$gid]['share_category'][$catid])
|
||
? $this->auth[$gid]['share_category'][$catid] : [];
|
||
}
|
||
$this->is_category_public = 1;
|
||
return isset($this->auth[$gid]['share_category_public'])
|
||
? $this->auth[$gid]['share_category_public'] : [];
|
||
}
|
||
|
||
if (!empty($this->auth[$gid]['module'][$mid]['is_category'])) {
|
||
$this->is_category_public = 0;
|
||
return isset($this->auth[$gid]['category'][$mid][$catid])
|
||
? $this->auth[$gid]['category'][$mid][$catid] : [];
|
||
}
|
||
$this->is_category_public = 1;
|
||
return isset($this->auth[$gid]['category_public'][$mid])
|
||
? $this->auth[$gid]['category_public'][$mid] : [];
|
||
}
|
||
|
||
// 站点权限
|
||
public function home_auth($name, $member = []) {
|
||
|
||
$this->_reload_auth();
|
||
$values = [];
|
||
foreach ($this->_get_groupid($member) as $gid) {
|
||
if (isset($this->auth[$gid]['home'][$name])) {
|
||
$values[] = $this->auth[$gid]['home'][$name];
|
||
}
|
||
}
|
||
|
||
return $values ? max($values) : null;
|
||
}
|
||
|
||
// 模块权限
|
||
public function module_auth($mid, $name, $member = []) {
|
||
|
||
$this->_reload_auth();
|
||
$values = [];
|
||
foreach ($this->_get_groupid($member) as $gid) {
|
||
if (isset($this->auth[$gid]['module'][$mid][$name])) {
|
||
$values[] = $this->auth[$gid]['module'][$mid][$name];
|
||
}
|
||
}
|
||
|
||
return $values ? max($values) : null;
|
||
}
|
||
|
||
// 栏目权限
|
||
public function category_auth($module, $catid, $name, $member = []) {
|
||
|
||
$this->_reload_auth();
|
||
$values = [];
|
||
$this->is_category_public = 0;
|
||
$groupid = $this->_get_groupid($member);
|
||
$has_config = false;
|
||
|
||
foreach ($groupid as $gid) {
|
||
$auth = $this->_category_auth_row($gid, $module, $catid);
|
||
if ($auth) {
|
||
// 本组已有栏目权限配置：未勾选的项视为关闭，不能再回退 public
|
||
$has_config = true;
|
||
if (isset($auth[$name])) {
|
||
$values[] = $auth[$name];
|
||
}
|
||
} elseif ($name === 'show') {
|
||
$values[] = 1; // 默认没勾选时访问开放
|
||
}
|
||
}
|
||
|
||
// 按用户组/等级时，仅当本组完全没有栏目权限配置，才回退 public
|
||
if (!$has_config && !$values && !in_array('public', $groupid, true) && isset($this->auth['public'])) {
|
||
$auth = $this->_category_auth_row('public', $module, $catid);
|
||
if (isset($auth[$name])) {
|
||
$values[] = $auth[$name];
|
||
} elseif (!$auth && $name === 'show') {
|
||
$values[] = 1;
|
||
}
|
||
}
|
||
|
||
return $values ? max($values) : null;
|
||
}
|
||
|
||
}
|