Python网页版怎样做用户权限管理_Python网页版权限控制与角色管理教程

from flask_sqlalchemy import SQLAlchemy
<p>db = SQLAlchemy()</p>
                    <div class="aritcle_card">
                        <a class="aritcle_card_img" href="/ai/1586">
                            <img src="https://img.php.cn/upload/ai_manual/000/000/000/175680266786298.png" alt="乾坤圈新媒体矩阵管家">
                        </a>
                        <div class="aritcle_card_info">
                            <a href="/ai/1586">乾坤圈新媒体矩阵管家</a>
                            <p>新媒体账号、门店矩阵智能管理系统</p>
                            <div class="">
                                <img src="/static/images/card_xiazai.png" alt="乾坤圈新媒体矩阵管家">
                                <span>17</span>
                            </div>
                        </div>
                        <a href="/ai/1586" class="aritcle_card_btn">
                            <span>查看详情</span>
                            <img src="/static/images/cardxiayige-3.png" alt="乾坤圈新媒体矩阵管家">
                        </a>
                    </div>
                <p>class Role(db.Model):
id = db.Column(db.Integer, primary_key=True)
name = db.Column(db.String(50), unique=True)
permissions = db.relationship('Permission', secondary='role_permissions')</p><p>class Permission(db.Model):
id = db.Column(db.Integer, primary_key=True)
name = db.Column(db.String(50), unique=True)  # 如 'delete_post'</p><p>role_permissions = db.Table('role_permissions',
db.Column('role_id', db.Integer, db.ForeignKey('role.id')),
db.Column('permission_id', db.Integer, db.ForeignKey('permission.id'))
)</p><p>class User(db.Model):
id = db.Column(db.Integer, primary_key=True)
username = db.Column(db.String(80), unique=True)
role_id = db.Column(db.Integer, db.ForeignKey('role.id'))
role = db.relationship('Role')</p>

from functools import wraps
from flask import abort, session
<p>def require_permission(permission_name):
def decorator(f):
@wraps(f)
def decorated_function(*args, *<em>kwargs):
user_id = session.get("user_id")
if not user_id:
return abort(401)
user = User.query.get(user_id)
if not user:
return abort(401)
if not any(p.name == permission_name for p in user.role.permissions):
return abort(403)
return f(</em>args, **kwargs)
return decorated_function
return decorator</p>

@app.route('/delete/<int:post_id>', methods=['POST'])
@require_permission('delete_post')
def delete_post(post_id):
    # 删除逻辑
    return "删除成功"