982 lines
38 KiB
PHP
982 lines
38 KiB
PHP
<?php namespace Phpcmf\Controllers\Admin;
|
||
|
||
/**
|
||
* 内容权限设置（模块 / 栏目）
|
||
* 用户侧权限仍在 Member 插件 member/auth
|
||
*/
|
||
class Auth extends \Phpcmf\Common
|
||
{
|
||
|
||
public function __construct() {
|
||
parent::__construct();
|
||
if (!IS_USE_MEMBER) {
|
||
$this->_admin_msg(0, dr_lang('未安装用户系统，无法设置内容权限'));
|
||
}
|
||
}
|
||
|
||
// 当前可配置的内容模块
|
||
protected function _content_modules() {
|
||
$module = \Phpcmf\Service::L('cache')->get('module-'.SITE_ID.'-content');
|
||
if (!$module) {
|
||
return [];
|
||
}
|
||
foreach ($module as $dir => $t) {
|
||
if ($t['hlist'] == 1) {
|
||
unset($module[$dir]);
|
||
}
|
||
}
|
||
return $module;
|
||
}
|
||
|
||
// 构建用户组 / 等级列
|
||
protected function _auth_columns($auth_type) {
|
||
|
||
$group = [
|
||
0 => [
|
||
'id' => 0,
|
||
'name' => dr_lang('游客'),
|
||
'use' => 1,
|
||
]
|
||
];
|
||
foreach ($this->member_cache['group'] as $t) {
|
||
$group[$t['id']] = [
|
||
'id' => $t['id'],
|
||
'name' => dr_lang($t['name']),
|
||
'use' => 1,
|
||
];
|
||
}
|
||
|
||
$level = [
|
||
0 => [
|
||
'id' => 0,
|
||
'name' => dr_lang('游客'),
|
||
'group_name' => '',
|
||
'level_name' => dr_lang('游客'),
|
||
'use' => 1,
|
||
]
|
||
];
|
||
foreach ($this->member_cache['group'] as $t) {
|
||
$gname = dr_lang($t['name']);
|
||
$level[$t['id']] = [
|
||
'id' => $t['id'],
|
||
'name' => $gname,
|
||
'group_name' => '',
|
||
'level_name' => $gname,
|
||
'use' => 1,
|
||
];
|
||
if ($t['level']) {
|
||
foreach ($t['level'] as $lv) {
|
||
$lname = dr_lang($lv['name']);
|
||
$level[$t['id'].'-'.$lv['id']] = [
|
||
'id' => $t['id'].'-'.$lv['id'],
|
||
'name' => $gname.' / '.$lname,
|
||
'group_name' => $gname,
|
||
'level_name' => $lname,
|
||
'use' => 1,
|
||
];
|
||
$level[$t['id']]['use'] = 0;
|
||
}
|
||
}
|
||
}
|
||
|
||
if ($auth_type == 1) {
|
||
return $group;
|
||
}
|
||
if ($auth_type == 2) {
|
||
$columns = [];
|
||
foreach ($level as $i => $t) {
|
||
if ($t['use']) {
|
||
$columns[$i] = $t;
|
||
}
|
||
}
|
||
return $columns;
|
||
}
|
||
return [
|
||
'public' => [
|
||
'id' => 'public',
|
||
'name' => dr_lang('全局'),
|
||
'use' => 1,
|
||
]
|
||
];
|
||
}
|
||
|
||
protected function _get_auth_row($auth_data, $aid) {
|
||
$key = (string)$aid;
|
||
if (isset($auth_data[$aid]) && is_array($auth_data[$aid])) {
|
||
return $auth_data[$aid];
|
||
}
|
||
if (isset($auth_data[$key]) && is_array($auth_data[$key])) {
|
||
return $auth_data[$key];
|
||
}
|
||
return [];
|
||
}
|
||
|
||
protected function _get_post_row($post, $aid) {
|
||
$key = (string)$aid;
|
||
if (isset($post[$aid]) && is_array($post[$aid])) {
|
||
return $post[$aid];
|
||
}
|
||
if (isset($post[$key]) && is_array($post[$key])) {
|
||
return $post[$key];
|
||
}
|
||
return [];
|
||
}
|
||
|
||
// 未勾选的 checkbox 不会出现在 POST 中，显式写成 0，避免关闭验证码等无效
|
||
protected function _normalize_category_auth_flags($auth) {
|
||
if (!is_array($auth)) {
|
||
$auth = [];
|
||
}
|
||
foreach (['show', 'add', 'edit', 'del', 'code'] as $f) {
|
||
$auth[$f] = empty($auth[$f]) ? 0 : 1;
|
||
}
|
||
return $auth;
|
||
}
|
||
|
||
// 表头：用户组 / 等级列
|
||
protected function _auth_thead_html($columns) {
|
||
$html = '<th class="fc-auth-name">'.dr_lang('权限项').'</th>';
|
||
foreach ($columns as $aid => $col) {
|
||
$key = (string)$aid;
|
||
if ($key === '0') {
|
||
$title = '<span class="font-red">'.htmlspecialchars((string)$col['name']).'</span>';
|
||
} elseif (!empty($col['group_name'])) {
|
||
$title = '<span class="fc-auth-gname">'.htmlspecialchars((string)$col['group_name']).'</span>'
|
||
.'<span class="fc-auth-lname">'.htmlspecialchars((string)$col['level_name']).'</span>';
|
||
} else {
|
||
$title = htmlspecialchars((string)$col['name']);
|
||
}
|
||
$html .= '<th class="fc-auth-col">'.$title.'</th>';
|
||
}
|
||
return $html;
|
||
}
|
||
|
||
protected function _auth_form_switch($label, $input_name, $checked, $help = '') {
|
||
$html = '<div class="form-group">'
|
||
.'<label class="col-md-2 control-label">'.$label.'</label>'
|
||
.'<div class="col-md-9">'
|
||
.'<input type="checkbox" name="'.$input_name.'" value="1"'
|
||
.($checked ? ' checked' : '')
|
||
.' data-on-text="'.dr_lang('禁止').'" data-off-text="'.dr_lang('开放').'"'
|
||
.' data-on-color="danger" data-off-color="success" class="make-switch" data-size="small">';
|
||
if ($help) {
|
||
$html .= '<span class="help-block">'.$help.'</span>';
|
||
}
|
||
$html .= '</div></div>';
|
||
return $html;
|
||
}
|
||
|
||
protected function _auth_matrix_wrap($thead, $tbody) {
|
||
return '<div class="table-scrollable fc-auth-wrap">'
|
||
.'<table class="table table-striped table-bordered table-hover fc-auth-table">'
|
||
.'<thead><tr class="heading">'.$thead.'</tr></thead>'
|
||
.'<tbody>'.$tbody.'</tbody>'
|
||
.'</table></div>';
|
||
}
|
||
|
||
// 栏目权限弹窗按钮
|
||
protected function _auth_category_btn($aid, $page, $title, $btn_class = 'btn blue btn-xs', $btn_text = '') {
|
||
$url = dr_url('cms/auth/add', ['aid' => $aid, 'page' => $page]);
|
||
$js_title = str_replace(["\\", "'"], ["\\\\", "\\'"], (string)$title);
|
||
if ($btn_text === '') {
|
||
$btn_text = dr_lang('设置');
|
||
}
|
||
return '<button type="button" class="'.$btn_class.'" onclick="dr_iframe_show(\''.$js_title.'\', \''.$url.'\', \'85%\', \'90%\')">'
|
||
.'<i class="fa fa-cog"></i> '.$btn_text
|
||
.'</button>';
|
||
}
|
||
|
||
// 栏目权限入口（全局表单）
|
||
protected function _auth_category_form($columns, $page = 'cms') {
|
||
$aid = 'public';
|
||
$name = dr_lang('全局');
|
||
foreach ($columns as $k => $col) {
|
||
$aid = (string)$k;
|
||
$name = (string)$col['name'];
|
||
break;
|
||
}
|
||
return '<div class="form-group">'
|
||
.'<label class="col-md-2 control-label">'.dr_lang('栏目权限').'</label>'
|
||
.'<div class="col-md-9">'
|
||
.$this->_auth_category_btn($aid, $page, dr_lang('[%s]栏目权限', $name), 'btn blue btn-sm', dr_lang('设置栏目发布/审核等权限'))
|
||
.'<span class="help-block">'.dr_lang('访问、发布、修改、删除及投稿限制等').'</span>'
|
||
.'</div></div>';
|
||
}
|
||
|
||
// 栏目权限矩阵行
|
||
protected function _auth_category_row($columns, $page = 'cms') {
|
||
$html = '<tr><td class="fc-auth-name">'.dr_lang('栏目权限').'</td>';
|
||
foreach ($columns as $aid => $col) {
|
||
$key = (string)$aid;
|
||
$html .= '<td class="fc-auth-col">'
|
||
.$this->_auth_category_btn($key, $page, dr_lang('[%s]栏目权限', $col['name']))
|
||
.'</td>';
|
||
}
|
||
$html .= '</tr>';
|
||
return $html;
|
||
}
|
||
|
||
public function index() {
|
||
|
||
$v = \Phpcmf\Service::M()->db->table('member_setting')->where('name', 'auth_type')->get()->getRowArray();
|
||
$auth_type = intval($v['value']);
|
||
$columns = $this->_auth_columns($auth_type);
|
||
$modules = $this->_content_modules();
|
||
|
||
$row = \Phpcmf\Service::M()->db->table('member_setting')->where('name', 'auth2')->get()->getRowArray();
|
||
$value = $row ? dr_string2array($row['value']) : [];
|
||
if (!is_array($value)) {
|
||
$value = [];
|
||
}
|
||
$auth_data = isset($value[SITE_ID]) && is_array($value[SITE_ID]) ? $value[SITE_ID] : [];
|
||
|
||
if (IS_AJAX_POST) {
|
||
|
||
$post = \Phpcmf\Service::L('input')->post('data');
|
||
if (!is_array($post)) {
|
||
$post = [];
|
||
}
|
||
|
||
foreach ($columns as $aid => $col) {
|
||
$old = $this->_get_auth_row($auth_data, $aid);
|
||
$post_row = $this->_get_post_row($post, $aid);
|
||
|
||
$home = isset($old['home']) && is_array($old['home']) ? $old['home'] : [];
|
||
$home['show'] = empty($post_row['home']['show']) ? 0 : 1;
|
||
$old['home'] = $home;
|
||
|
||
$mod = isset($old['module']) && is_array($old['module']) ? $old['module'] : [];
|
||
foreach ($modules as $mid => $m) {
|
||
if (!isset($mod[$mid]) || !is_array($mod[$mid])) {
|
||
$mod[$mid] = [];
|
||
}
|
||
$mod[$mid]['show'] = empty($post_row['module'][$mid]['show']) ? 0 : 1;
|
||
$mod[$mid]['search'] = empty($post_row['module'][$mid]['search']) ? 0 : 1;
|
||
}
|
||
$old['module'] = $mod;
|
||
|
||
$auth_data[$aid] = $old;
|
||
}
|
||
|
||
$value[SITE_ID] = $auth_data;
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth2',
|
||
'value' => dr_array2string($value)
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
$this->_json(1, dr_lang('操作成功'));
|
||
}
|
||
|
||
$is_single = dr_count($columns) <= 1;
|
||
$page = \Phpcmf\Service::L('input')->get('page');
|
||
if (!$page) {
|
||
$page = 'site';
|
||
}
|
||
if ($page !== 'site' && !isset($modules[$page])) {
|
||
$page = 'site';
|
||
}
|
||
|
||
$tabs = [];
|
||
|
||
// —— 整站 ——
|
||
$site_html = '';
|
||
if ($is_single) {
|
||
$aid = 'public';
|
||
foreach ($columns as $k => $col) {
|
||
$aid = (string)$k;
|
||
break;
|
||
}
|
||
$data = $this->_get_auth_row($auth_data, $aid);
|
||
$aid_attr = htmlspecialchars($aid);
|
||
$site_html .= $this->_auth_form_switch(
|
||
dr_lang('禁止整站访问'),
|
||
'data['.$aid_attr.'][home][show]',
|
||
!empty($data['home']['show']),
|
||
dr_lang('针对整个网站的前端界面访问权限')
|
||
);
|
||
$site_html .= $this->_auth_category_form($columns, 'cms');
|
||
} else {
|
||
$tbody = '<tr><td class="fc-auth-name">'.dr_lang('禁止整站访问').'</td>';
|
||
foreach ($columns as $aid => $col) {
|
||
$key = (string)$aid;
|
||
$data = $this->_get_auth_row($auth_data, $aid);
|
||
$checked = !empty($data['home']['show']) ? ' checked' : '';
|
||
$tbody .= '<td class="fc-auth-col">'
|
||
.'<input type="checkbox" class="fc-auth-check" name="data['.htmlspecialchars($key).'][home][show]" value="1"'.$checked.' />'
|
||
.'</td>';
|
||
}
|
||
$tbody .= '</tr>';
|
||
$tbody .= $this->_auth_category_row($columns, 'cms');
|
||
$site_html .= $this->_auth_matrix_wrap($this->_auth_thead_html($columns), $tbody);
|
||
}
|
||
$tabs['site'] = [
|
||
'id' => 'site',
|
||
'name' => dr_lang('整站'),
|
||
'dirname' => '',
|
||
'icon' => 'fa fa-globe',
|
||
'html' => $site_html,
|
||
];
|
||
|
||
// —— 各内容模块 ——
|
||
foreach ($modules as $mid => $m) {
|
||
$mname = dr_lang($m['name']);
|
||
$icon = !empty($m['icon']) ? $m['icon'] : 'fa fa-folder';
|
||
$mod_html = '';
|
||
if ($is_single) {
|
||
$aid = 'public';
|
||
foreach ($columns as $k => $col) {
|
||
$aid = (string)$k;
|
||
break;
|
||
}
|
||
$data = $this->_get_auth_row($auth_data, $aid);
|
||
$aid_attr = htmlspecialchars($aid);
|
||
$mid_attr = htmlspecialchars($mid);
|
||
$mod_html .= $this->_auth_form_switch(
|
||
dr_lang('禁止访问'),
|
||
'data['.$aid_attr.'][module]['.$mid_attr.'][show]',
|
||
!empty($data['module'][$mid]['show']),
|
||
dr_lang('禁止后无法访问本模块前台')
|
||
);
|
||
$mod_html .= $this->_auth_form_switch(
|
||
dr_lang('禁止搜索'),
|
||
'data['.$aid_attr.'][module]['.$mid_attr.'][search]',
|
||
!empty($data['module'][$mid]['search']),
|
||
dr_lang('禁止后无法使用本模块搜索')
|
||
);
|
||
if (empty($m['share'])) {
|
||
$mod_html .= $this->_auth_category_form($columns, $mid);
|
||
} else {
|
||
$mod_html .= '<div class="form-group"><label class="col-md-2 control-label">'.dr_lang('栏目权限').'</label>'
|
||
.'<div class="col-md-9"><span class="help-block" style="margin-top:8px;">'
|
||
.dr_lang('本模块使用共享栏目，请到「整站」中设置栏目权限')
|
||
.'</span></div></div>';
|
||
}
|
||
} else {
|
||
$tbody = '';
|
||
$tbody .= '<tr><td class="fc-auth-name">'.dr_lang('禁止访问').'</td>';
|
||
foreach ($columns as $aid => $col) {
|
||
$key = (string)$aid;
|
||
$data = $this->_get_auth_row($auth_data, $aid);
|
||
$checked = !empty($data['module'][$mid]['show']) ? ' checked' : '';
|
||
$tbody .= '<td class="fc-auth-col">'
|
||
.'<input type="checkbox" class="fc-auth-check" name="data['.htmlspecialchars($key).'][module]['.htmlspecialchars($mid).'][show]" value="1"'.$checked.' />'
|
||
.'</td>';
|
||
}
|
||
$tbody .= '</tr>';
|
||
$tbody .= '<tr><td class="fc-auth-name">'.dr_lang('禁止搜索').'</td>';
|
||
foreach ($columns as $aid => $col) {
|
||
$key = (string)$aid;
|
||
$data = $this->_get_auth_row($auth_data, $aid);
|
||
$checked = !empty($data['module'][$mid]['search']) ? ' checked' : '';
|
||
$tbody .= '<td class="fc-auth-col">'
|
||
.'<input type="checkbox" class="fc-auth-check" name="data['.htmlspecialchars($key).'][module]['.htmlspecialchars($mid).'][search]" value="1"'.$checked.' />'
|
||
.'</td>';
|
||
}
|
||
$tbody .= '</tr>';
|
||
if (empty($m['share'])) {
|
||
$tbody .= $this->_auth_category_row($columns, $mid);
|
||
}
|
||
$mod_html .= $this->_auth_matrix_wrap($this->_auth_thead_html($columns), $tbody);
|
||
if (!empty($m['share'])) {
|
||
$mod_html .= '<p class="help-block" style="margin-top:12px;">'
|
||
.dr_lang('本模块使用共享栏目，请到「整站」中设置栏目权限')
|
||
.'</p>';
|
||
}
|
||
}
|
||
$tabs[$mid] = [
|
||
'id' => $mid,
|
||
'name' => $mname,
|
||
'dirname' => $mid,
|
||
'icon' => $icon,
|
||
'html' => $mod_html,
|
||
];
|
||
}
|
||
|
||
\Phpcmf\Service::V()->assign([
|
||
'menu' => \Phpcmf\Service::M('auth')->_admin_menu(
|
||
[
|
||
'内容权限' => ['cms/auth/index', 'fa fa-table'],
|
||
'help' => [801],
|
||
]
|
||
),
|
||
'auth_type' => $auth_type,
|
||
'page' => $page,
|
||
'tabs' => $tabs,
|
||
]);
|
||
\Phpcmf\Service::V()->display('auth_index.html');
|
||
}
|
||
|
||
// 存储模式值
|
||
public function save_edit() {
|
||
|
||
$value = intval(\Phpcmf\Service::L('input')->get('value'));
|
||
if (!$value) {
|
||
$msg = dr_lang('已切换至按全局配置模式');
|
||
} elseif ($value == 1) {
|
||
$msg = dr_lang('已切换至按用户组配置模式');
|
||
} elseif ($value == 2) {
|
||
$msg = dr_lang('已切换至按用户组等级配置模式');
|
||
} else {
|
||
$this->_json(0, dr_lang('未知模式'));
|
||
}
|
||
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth_type',
|
||
'value' => $value
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
|
||
$this->_json(1, $msg);
|
||
}
|
||
|
||
// 初始化组权限（仅清空内容相关配置，保留用户权限）
|
||
public function init_edit() {
|
||
|
||
$v = \Phpcmf\Service::M()->db->table('member_setting')->where('name', 'auth2')->get()->getRowArray();
|
||
$aid = \Phpcmf\Service::L('input')->get('aid');
|
||
if ($aid === null || $aid === false || $aid === '') {
|
||
$this->_json(0, dr_lang('参数错误'));
|
||
}
|
||
if ($aid !== 'public' && $aid !== '0' && $aid !== 0
|
||
&& !preg_match('/^\d+(-\d+)?$/', (string)$aid)) {
|
||
$this->_json(0, dr_lang('参数错误'));
|
||
}
|
||
$value = $v ? dr_string2array($v['value']) : [];
|
||
if (!is_array($value)) {
|
||
$value = [];
|
||
}
|
||
$old = isset($value[SITE_ID][$aid]) && is_array($value[SITE_ID][$aid]) ? $value[SITE_ID][$aid] : [];
|
||
if (!$old && is_numeric($aid) && isset($value[SITE_ID][intval($aid)]) && is_array($value[SITE_ID][intval($aid)])) {
|
||
$old = $value[SITE_ID][intval($aid)];
|
||
}
|
||
$keep = [];
|
||
if (isset($old['member'])) {
|
||
$keep['member'] = $old['member'];
|
||
}
|
||
if (isset($old['app'])) {
|
||
$keep['app'] = $old['app'];
|
||
}
|
||
$value[SITE_ID][$aid] = $keep;
|
||
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth2',
|
||
'value' => dr_array2string($value)
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
|
||
$this->_json(1, dr_lang('本组内容权限初始化完成'));
|
||
}
|
||
|
||
// 栏目等详细权限设置
|
||
public function add() {
|
||
|
||
$aid = \Phpcmf\Service::L('input')->get('aid');
|
||
if ($aid == 'public') {
|
||
$name = dr_lang('全局');
|
||
} elseif (!$aid && $aid !== '0' && $aid !== 0) {
|
||
$aid = 0;
|
||
$name = dr_lang('游客');
|
||
} elseif (strpos((string)$aid, '-') !== false) {
|
||
list($gid, $lid) = explode('-', $aid);
|
||
if (!$this->member_cache['group'][$gid]) {
|
||
$this->_admin_msg(0, dr_lang('此用户组不存在'));
|
||
} elseif (!$this->member_cache['group'][$gid]['level'][$lid]) {
|
||
$this->_admin_msg(0, dr_lang('此用户组等级不存在'));
|
||
}
|
||
$name = $this->member_cache['group'][$gid]['name'].'-'.$this->member_cache['group'][$gid]['level'][$lid]['name'];
|
||
} else {
|
||
if ($aid !== '0' && $aid !== 0 && !$this->member_cache['group'][$aid]) {
|
||
$this->_admin_msg(0, dr_lang('此用户组不存在'));
|
||
}
|
||
$name = ($aid === '0' || $aid === 0) ? dr_lang('游客') : $this->member_cache['group'][$aid]['name'];
|
||
}
|
||
|
||
// 共享栏目
|
||
$share_module = \Phpcmf\Service::L('cache')->get('module-'.SITE_ID.'-share');
|
||
$share_categroy = [];
|
||
if (is_file(dr_get_app_dir('module').'Libraries/Category.php')) {
|
||
$share_module['category'] = \Phpcmf\Service::L('category', 'module')->get_category('share');
|
||
}
|
||
if ($share_module['category']) {
|
||
foreach ($share_module['category'] as $t) {
|
||
if ($t['tid'] != 2) {
|
||
$t['is_post'] = 0;
|
||
if (!$t['child'] && $t['tid'] == 1) {
|
||
$t['is_post'] = 1;
|
||
}
|
||
$share_categroy[$t['id']] = $t;
|
||
}
|
||
}
|
||
}
|
||
|
||
// 模块部分
|
||
$module = $this->_content_modules();
|
||
if ($module) {
|
||
foreach ($module as $dir => $t) {
|
||
if (is_file(dr_get_app_dir('module').'Libraries/Category.php')) {
|
||
$module[$dir]['category'] = \Phpcmf\Service::L('tree', 'module')
|
||
->init(\Phpcmf\Service::L('category', 'module')->get_category($dir))
|
||
->html_icon()->get_tree_array(0);
|
||
} else {
|
||
$module[$dir]['category'] = \Phpcmf\Service::L('cache')->get('module-'.SITE_ID.'-'.$dir, 'category');
|
||
}
|
||
}
|
||
}
|
||
|
||
$v = \Phpcmf\Service::M()->db->table('member_setting')->where('name', 'auth2')->get()->getRowArray();
|
||
$value = $v ? dr_string2array($v['value']) : [];
|
||
if (!is_array($value)) {
|
||
$value = [];
|
||
}
|
||
$data = isset($value[SITE_ID][$aid]) && is_array($value[SITE_ID][$aid]) ? $value[SITE_ID][$aid] : [];
|
||
$auth = [
|
||
'share_category' => is_array($data['share_category_public'] ?? null) ? $data['share_category_public'] : [],
|
||
'category' => is_array($data['category_public'] ?? null) ? $data['category_public'] : [],
|
||
];
|
||
|
||
if (IS_AJAX_POST) {
|
||
|
||
$post = \Phpcmf\Service::L('input')->post('data');
|
||
if (!is_array($post)) {
|
||
$post = [];
|
||
}
|
||
$save = $data;
|
||
|
||
// 栏目模式与统一栏目权限
|
||
if (isset($post['home']['is_category'])) {
|
||
if (!isset($save['home']) || !is_array($save['home'])) {
|
||
$save['home'] = [];
|
||
}
|
||
$save['home']['is_category'] = empty($post['home']['is_category']) ? 0 : 1;
|
||
}
|
||
$share_public = \Phpcmf\Service::L('input')->post('share_category');
|
||
if (is_array($share_public)) {
|
||
$save['share_category_public'] = $this->_normalize_category_auth_flags($share_public);
|
||
}
|
||
$cat_public = \Phpcmf\Service::L('input')->post('category');
|
||
if (is_array($cat_public)) {
|
||
if (!isset($save['category_public']) || !is_array($save['category_public'])) {
|
||
$save['category_public'] = [];
|
||
}
|
||
foreach ($cat_public as $cmid => $crow) {
|
||
// 模板里的 hidden test 字段不算权限配置
|
||
if (!is_array($crow) || (dr_count($crow) === 1 && isset($crow['test']))) {
|
||
continue;
|
||
}
|
||
$save['category_public'][$cmid] = $this->_normalize_category_auth_flags($crow);
|
||
}
|
||
}
|
||
if (isset($post['module']) && is_array($post['module'])) {
|
||
if (!isset($save['module']) || !is_array($save['module'])) {
|
||
$save['module'] = [];
|
||
}
|
||
foreach ($post['module'] as $mid => $row) {
|
||
if (!isset($save['module'][$mid]) || !is_array($save['module'][$mid])) {
|
||
$save['module'][$mid] = [];
|
||
}
|
||
if (isset($row['is_category'])) {
|
||
$save['module'][$mid]['is_category'] = empty($row['is_category']) ? 0 : 1;
|
||
}
|
||
}
|
||
}
|
||
|
||
// 保留用户权限 / 应用权限 / 访问禁止项 / 按栏目独立设置
|
||
if (isset($data['member'])) {
|
||
$save['member'] = $data['member'];
|
||
}
|
||
if (isset($data['app'])) {
|
||
$save['app'] = $data['app'];
|
||
}
|
||
if (isset($data['home']['show'])) {
|
||
if (!isset($save['home']) || !is_array($save['home'])) {
|
||
$save['home'] = [];
|
||
}
|
||
$save['home']['show'] = $data['home']['show'];
|
||
}
|
||
if (isset($data['module']) && is_array($data['module'])) {
|
||
foreach ($data['module'] as $mid => $row) {
|
||
if (!isset($save['module'][$mid]) || !is_array($save['module'][$mid])) {
|
||
$save['module'][$mid] = [];
|
||
}
|
||
if (isset($row['show'])) {
|
||
$save['module'][$mid]['show'] = $row['show'];
|
||
}
|
||
if (isset($row['search'])) {
|
||
$save['module'][$mid]['search'] = $row['search'];
|
||
}
|
||
}
|
||
}
|
||
if (isset($data['share_category'])) {
|
||
$save['share_category'] = $data['share_category'];
|
||
}
|
||
if (isset($data['category'])) {
|
||
$save['category'] = $data['category'];
|
||
}
|
||
|
||
$value[SITE_ID][$aid] = $save;
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth2',
|
||
'value' => dr_array2string($value)
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
$this->_json(1, dr_lang('操作成功'));
|
||
}
|
||
|
||
$page = trim(\Phpcmf\Service::L('input')->get('page'));
|
||
if (!$page) {
|
||
$page = 'cms';
|
||
}
|
||
|
||
// 弹窗只展示当前入口对应的栏目（共享 / 单个模块）
|
||
$is_share_page = ($page === 'cms' || $page === 'site');
|
||
$mid = '';
|
||
$m = [];
|
||
if ($is_share_page) {
|
||
$page = 'cms';
|
||
$page_name = dr_lang('共享栏目');
|
||
} elseif (isset($module[$page])) {
|
||
$mid = $page;
|
||
$m = $module[$page];
|
||
$page_name = dr_lang($m['name']);
|
||
// 共享型模块无独立栏目，回退到共享栏目
|
||
if (!empty($m['share'])) {
|
||
$is_share_page = true;
|
||
$page = 'cms';
|
||
$mid = '';
|
||
$m = [];
|
||
$page_name = dr_lang('共享栏目');
|
||
}
|
||
} else {
|
||
$this->_admin_msg(0, dr_lang('模块不存在'));
|
||
}
|
||
|
||
$verify = [];
|
||
if (\Phpcmf\Service::M()->is_table_exists('admin_verify')) {
|
||
$verify = \Phpcmf\Service::M()->table('admin_verify')->getAll();
|
||
}
|
||
|
||
$diy = $this->_get_diy();
|
||
if ($is_share_page) {
|
||
$diy['module'] = [];
|
||
}
|
||
|
||
\Phpcmf\Service::V()->assign([
|
||
'aid' => $aid,
|
||
'diy' => $diy,
|
||
'menu' => \Phpcmf\Service::M('auth')->_admin_menu(
|
||
[
|
||
dr_lang('%s：%s栏目权限', $name, $page_name) => ['cms/auth/add{aid='.$aid.'&page='.$page.'}', 'fa fa-table'],
|
||
'help' => [801],
|
||
]
|
||
),
|
||
'page' => $page,
|
||
'page_name' => $page_name,
|
||
'is_share_page' => $is_share_page,
|
||
'mid' => $mid,
|
||
'm' => $m,
|
||
'data' => $data,
|
||
'auth' => $auth,
|
||
'verify' => $verify,
|
||
'is_ajax_edit' => 0,
|
||
'share_categroy' => \Phpcmf\Service::L('tree')->init($share_categroy)->html_icon()->get_tree_array(0),
|
||
]);
|
||
\Phpcmf\Service::V()->display('auth_setting.html');
|
||
}
|
||
|
||
// 弹出设置单独权限
|
||
public function edit() {
|
||
|
||
$at = dr_safe_filename(\Phpcmf\Service::L('input')->get('at'));
|
||
if (!$at || !in_array($at, ['share_category', 'category'])) {
|
||
$this->_json(0, dr_lang('at参数错误'));
|
||
}
|
||
|
||
$v = \Phpcmf\Service::M()->db->table('member_setting')->where('name', 'auth2')->get()->getRowArray();
|
||
$aid = \Phpcmf\Service::L('input')->get('aid');
|
||
!$aid && $aid !== '0' && $aid = 0;
|
||
$value = $v ? dr_string2array($v['value']) : [];
|
||
if (!is_array($value)) {
|
||
$value = [];
|
||
}
|
||
|
||
$id = intval(\Phpcmf\Service::L('input')->get('id'));
|
||
if (!$id) {
|
||
$this->_json(0, dr_lang('id参数错误'));
|
||
}
|
||
|
||
$mid = dr_safe_filename(\Phpcmf\Service::L('input')->get('mid'));
|
||
|
||
if (IS_AJAX_POST) {
|
||
|
||
if ($at == 'category') {
|
||
$post = \Phpcmf\Service::L('input')->post($at);
|
||
$row = is_array($post[$mid] ?? null) ? $post[$mid] : [];
|
||
$value[SITE_ID][$aid][$at][$mid][$id] = $this->_normalize_category_auth_flags($row);
|
||
} else {
|
||
$row = \Phpcmf\Service::L('input')->post($at);
|
||
$value[SITE_ID][$aid][$at][$id] = $this->_normalize_category_auth_flags($row);
|
||
}
|
||
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth2',
|
||
'value' => dr_array2string($value)
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
$this->_json(1, dr_lang('操作成功'));
|
||
}
|
||
|
||
if ($at == 'category') {
|
||
$auth = [$at => [$mid => $value[SITE_ID][$aid][$at][$mid][$id]]];
|
||
} else {
|
||
$auth = [$at => $value[SITE_ID][$aid][$at][$id]];
|
||
}
|
||
|
||
$verify = [];
|
||
if (\Phpcmf\Service::M()->is_table_exists('admin_verify')) {
|
||
$verify = \Phpcmf\Service::M()->table('admin_verify')->getAll();
|
||
}
|
||
|
||
\Phpcmf\Service::V()->assign([
|
||
'mid' => $mid,
|
||
'diy' => $this->_get_diy(),
|
||
'auth' => $auth,
|
||
'verify' => $verify,
|
||
'is_ajax_edit' => 1,
|
||
]);
|
||
\Phpcmf\Service::V()->display('auth_'.$at.'.html');
|
||
}
|
||
|
||
// 复制动作
|
||
public function copy_edit() {
|
||
|
||
$id = intval(\Phpcmf\Service::L('input')->get('id'));
|
||
$at = dr_safe_filename(\Phpcmf\Service::L('input')->get('at'));
|
||
if (!$at) {
|
||
$this->_json(0, dr_lang('at参数错误'));
|
||
}
|
||
|
||
$v = \Phpcmf\Service::M()->db->table('member_setting')->where('name', 'auth2')->get()->getRowArray();
|
||
$aid = \Phpcmf\Service::L('input')->get('aid');
|
||
!$aid && $aid !== '0' && $aid = 0;
|
||
$value = $v ? dr_string2array($v['value']) : [];
|
||
if (!is_array($value)) {
|
||
$value = [];
|
||
}
|
||
|
||
switch ($at) {
|
||
|
||
case 'level':
|
||
case 'group':
|
||
$group = [
|
||
0 => [
|
||
'id' => 0,
|
||
'name' => dr_lang('游客'),
|
||
],
|
||
];
|
||
foreach ($this->member_cache['group'] as $t) {
|
||
if ($at == 'level') {
|
||
$group[$t['id']] = [
|
||
'id' => $t['id'],
|
||
'name' => dr_lang($t['name']),
|
||
];
|
||
if ($t['level']) {
|
||
foreach ($t['level'] as $lv) {
|
||
$group[$t['id'].'-'.$lv['id']] = [
|
||
'id' => $t['id'].'-'.$lv['id'],
|
||
'name' => ' └ '.dr_lang($lv['name']),
|
||
];
|
||
}
|
||
}
|
||
} else {
|
||
$group[$t['id']] = $t;
|
||
}
|
||
}
|
||
|
||
if (IS_AJAX_POST) {
|
||
|
||
$auth = $value[SITE_ID][$aid];
|
||
if (!$auth) {
|
||
$this->_json(0, dr_lang('当前用户组没有配置权限规则'));
|
||
}
|
||
|
||
$catids = \Phpcmf\Service::L('input')->post('catid');
|
||
if (!$catids) {
|
||
$this->_json(0, dr_lang('你还没有选择用户组呢'));
|
||
}
|
||
|
||
$c = 0;
|
||
if (isset($catids[0]) && $catids[0] == 0) {
|
||
foreach ($group as $gid => $t) {
|
||
$c++;
|
||
$value[SITE_ID][$gid] = $auth;
|
||
}
|
||
} else {
|
||
foreach ($catids as $gid) {
|
||
$c++;
|
||
$value[SITE_ID][$gid] = $auth;
|
||
}
|
||
}
|
||
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth2',
|
||
'value' => dr_array2string($value)
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
$this->_json(1, dr_lang('共复制%s个用户组', $c));
|
||
}
|
||
|
||
\Phpcmf\Service::V()->assign([
|
||
'form' => dr_form_hidden(),
|
||
'select' => \Phpcmf\Service::L('tree')->select_category(
|
||
$group,
|
||
0,
|
||
'id=\'dr_catid\' name=\'catid[]\' multiple="multiple" style="height:200px"',
|
||
'',
|
||
0,
|
||
0
|
||
),
|
||
]);
|
||
\Phpcmf\Service::V()->display('auth_copy_group.html');exit;
|
||
|
||
case 'share_category':
|
||
$share_module = \Phpcmf\Service::L('cache')->get('module-'.SITE_ID.'-share');
|
||
if (is_file(dr_get_app_dir('module').'Libraries/Category.php')) {
|
||
$share_module['category'] = \Phpcmf\Service::L('category', 'module')->get_category('share');
|
||
}
|
||
if (IS_AJAX_POST) {
|
||
|
||
$auth = $value[SITE_ID][$aid]['share_category'][$id];
|
||
if (!$auth) {
|
||
$this->_json(0, dr_lang('当前栏目没有配置权限规则'));
|
||
}
|
||
|
||
$catids = \Phpcmf\Service::L('input')->post('catid');
|
||
if (!$catids) {
|
||
$this->_json(0, dr_lang('你还没有选择栏目呢'));
|
||
}
|
||
|
||
$c = 0;
|
||
if (isset($catids[0]) && $catids[0] == 0) {
|
||
foreach ($share_module['category'] as $cid => $t) {
|
||
$c++;
|
||
$value[SITE_ID][$aid]['share_category'][$cid] = $auth;
|
||
}
|
||
} else {
|
||
foreach ($catids as $cid) {
|
||
$c++;
|
||
$value[SITE_ID][$aid]['share_category'][$cid] = $auth;
|
||
}
|
||
}
|
||
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth2',
|
||
'value' => dr_array2string($value)
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
$this->_json(1, dr_lang('共复制%s个栏目', $c));
|
||
}
|
||
|
||
\Phpcmf\Service::V()->assign([
|
||
'form' => dr_form_hidden(),
|
||
'select' => \Phpcmf\Service::L('tree')->select_category(
|
||
$share_module['category'],
|
||
0,
|
||
'id=\'dr_catid\' name=\'catid[]\' multiple="multiple" style="height:200px"',
|
||
dr_lang('全部栏目'),
|
||
0,
|
||
0
|
||
),
|
||
]);
|
||
\Phpcmf\Service::V()->display('auth_copy_category.html');exit;
|
||
|
||
case 'category':
|
||
$mid = dr_safe_filename(\Phpcmf\Service::L('input')->get('mid'));
|
||
$module = \Phpcmf\Service::L('cache')->get('module-'.SITE_ID.'-'.$mid);
|
||
if (is_file(dr_get_app_dir('module').'Libraries/Category.php')) {
|
||
$module['category'] = \Phpcmf\Service::L('category', 'module')->get_category($mid);
|
||
}
|
||
if (IS_AJAX_POST) {
|
||
|
||
$auth = $value[SITE_ID][$aid]['category'][$mid][$id];
|
||
if (!$auth) {
|
||
$this->_json(0, dr_lang('当前栏目没有配置权限规则'));
|
||
}
|
||
|
||
$catids = \Phpcmf\Service::L('input')->post('catid');
|
||
if (!$catids) {
|
||
$this->_json(0, dr_lang('你还没有选择栏目呢'));
|
||
}
|
||
|
||
$c = 0;
|
||
if (isset($catids[0]) && $catids[0] == 0) {
|
||
foreach ($module['category'] as $cid => $t) {
|
||
$c++;
|
||
$value[SITE_ID][$aid]['category'][$mid][$cid] = $auth;
|
||
}
|
||
} else {
|
||
foreach ($catids as $cid) {
|
||
$c++;
|
||
$value[SITE_ID][$aid]['category'][$mid][$cid] = $auth;
|
||
}
|
||
}
|
||
|
||
\Phpcmf\Service::M()->db->table('member_setting')->replace([
|
||
'name' => 'auth2',
|
||
'value' => dr_array2string($value)
|
||
]);
|
||
\Phpcmf\Service::M('cache')->sync_cache('member');
|
||
$this->_json(1, dr_lang('共复制%s个栏目', $c));
|
||
}
|
||
|
||
\Phpcmf\Service::V()->assign([
|
||
'form' => dr_form_hidden(),
|
||
'select' => \Phpcmf\Service::L('category', 'module')->select(
|
||
$module['mid'],
|
||
0,
|
||
'id=\'dr_catid\' name=\'catid[]\' multiple="multiple" style="height:200px"',
|
||
dr_lang('全部栏目'),
|
||
0,
|
||
0
|
||
),
|
||
]);
|
||
\Phpcmf\Service::V()->display('auth_copy_category.html');exit;
|
||
}
|
||
|
||
$this->_json(0, dr_lang('未知类型'));
|
||
}
|
||
|
||
private function _get_diy() {
|
||
|
||
$diy = [
|
||
'module' => [],
|
||
'category' => [],
|
||
];
|
||
|
||
$local = \Phpcmf\Service::Apps(1);
|
||
foreach ($local as $dir => $path) {
|
||
if (is_file($path.'Config/Auth.php')) {
|
||
$_data = require $path.'Config/Auth.php';
|
||
if ($_data) {
|
||
foreach ($_data as $key => $val) {
|
||
if ($val && isset($diy[$key])) {
|
||
foreach ($val as $file) {
|
||
if (is_file($path.'Views/auth/'.$file)) {
|
||
$diy[$key][] = [
|
||
'app' => $dir,
|
||
'file' => $path.'Views/auth/'.$file,
|
||
];
|
||
} else {
|
||
log_message('error', '应用插件['.$dir.']权限模板文件不存在：'.$path.'Views/auth/'.$file);
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
return $diy;
|
||
}
|
||
|
||
}
|