rbac权限控制，基于无线分类

CREATE TABLE `admin` (
  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `create_time` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00‘ COMMENT ‘创建时间‘,
  `update_time` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00‘ COMMENT ‘更新时间‘,
  `remark` varchar(200) DEFAULT NULL COMMENT ‘备注‘,
  `is_delete` tinyint(1) NOT NULL DEFAULT ‘10‘ COMMENT ‘10默认99删除‘,
  `shop_id` bigint(20) NOT NULL DEFAULT ‘0‘ COMMENT ‘店铺ID‘,
  `admin_login_name` varchar(20) NOT NULL COMMENT ‘登录名称‘,
  `admin_password` varchar(32) DEFAULT NULL COMMENT ‘登录密码‘,
  `admin_phone` varchar(11) DEFAULT NULL COMMENT ‘手机号码‘,
  `admin_email` varchar(20) DEFAULT NULL COMMENT ‘邮箱‘,
  `real_name` varchar(20) DEFAULT NULL COMMENT ‘真实姓名‘,
  `admin_avatar` varchar(100) DEFAULT NULL COMMENT ‘管理员头像‘,
  `admin_qq` varchar(20) DEFAULT NULL COMMENT ‘管理员qq‘,
  `admin_id` bigint(20) NOT NULL DEFAULT ‘0‘ COMMENT ‘创建者管理员ID‘,
  `manage_product` varchar(200) DEFAULT NULL COMMENT ‘管理的商品属性分类‘,
  `admin_status` tinyint(1) unsigned NOT NULL DEFAULT ‘10‘ COMMENT ‘默认10通过20不通过99‘,
  `session_id` varchar(50) DEFAULT NULL COMMENT ‘session_id‘,
  `admin_group_ids` varchar(500) DEFAULT NULL COMMENT ‘用户权限组ID集合‘,
  `is_admin` tinyint(1) unsigned NOT NULL DEFAULT ‘10‘ COMMENT ‘系统超级管理员10默认20是‘,
  `is_shop_admin` tinyint(1) unsigned NOT NULL DEFAULT ‘10‘ COMMENT ‘店铺管理员10默认20是‘,
  `token` varchar(32) DEFAULT NULL COMMENT ‘token字符串‘,
  `token_time` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00‘ COMMENT ‘token创建时间‘,
  `status` tinyint(1) NOT NULL DEFAULT ‘10‘ COMMENT ‘默认10锁定20‘,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=4 DEFAULT CHARSET=utf8mb4 COMMENT=‘管理员表‘

CREATE TABLE `admin_group` (
  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `create_time` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00‘ COMMENT ‘创建时间‘,
  `update_time` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00‘ COMMENT ‘更新时间‘,
  `remark` varchar(200) DEFAULT NULL COMMENT ‘备注‘,
  `is_delete` tinyint(1) NOT NULL DEFAULT ‘10‘ COMMENT ‘10默认99删除‘,
  `parent_group_id` int(10) unsigned NOT NULL DEFAULT ‘0‘ COMMENT ‘父ID 0是顶级‘,
  `group_name` varchar(50) NOT NULL COMMENT ‘分组名称‘,
  `permission_ids` text COMMENT ‘permission_id集合‘,
  `tag` varchar(50) DEFAULT NULL COMMENT ‘标签‘,
  `sort` tinyint(1) unsigned NOT NULL DEFAULT ‘255‘ COMMENT ‘排序‘,
  `shop_id` bigint(20) NOT NULL DEFAULT ‘0‘ COMMENT ‘店铺ID‘,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4 COMMENT=‘admin权限组‘

CREATE TABLE `admin_permission` (
  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `create_time` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00‘ COMMENT ‘创建时间‘,
  `update_time` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00‘ COMMENT ‘更新时间‘,
  `remark` varchar(200) DEFAULT NULL COMMENT ‘备注‘,
  `is_delete` tinyint(1) NOT NULL DEFAULT ‘10‘ COMMENT ‘10默认99删除‘,
  `parent_permission_id` int(10) unsigned NOT NULL DEFAULT ‘0‘ COMMENT ‘父ID 0是顶级‘,
  `permission_name` varchar(50) NOT NULL COMMENT ‘控制名称‘,
  `permission_url` varchar(100) NOT NULL DEFAULT ‘‘ COMMENT ‘控制器URL‘,
  `tag` varchar(50) NOT NULL DEFAULT ‘‘ COMMENT ‘标签，标志‘,
  `is_menu` tinyint(1) unsigned NOT NULL DEFAULT ‘1‘ COMMENT ‘作为菜单显示,1是,2不是‘,
  `small_icon_name` varchar(50) DEFAULT NULL COMMENT ‘小图标名称‘,
  `shop_id` bigint(20) NOT NULL DEFAULT ‘0‘ COMMENT ‘店铺ID‘,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=53 DEFAULT CHARSET=utf8mb4 COMMENT=‘管理员权限表‘

//获取菜单数据
    public static function get_menu($admin_id = null, $is_shop_admin = 10, $is_admin = 10) {
        if (empty($admin_id)) {
            throw new \Exception(‘管理员ID为空‘);
        }
        $field = array(‘id‘, ‘parent_permission_id‘, ‘permission_name‘, ‘permission_url‘, ‘small_icon_name‘);
        $result = AdminPermission::where(‘is_menu‘, 1)->orderBy(‘id‘, ‘asc‘)->get($field)->toArray();
        if (empty($result)) {
            throw new \Exception(‘权限表为空‘);
        }
        //获取菜单树数组
        $menu = self::tree_menu($result);
        //店铺管理员或者超级管理员都有全部权限
        if ($is_shop_admin == 20 || $is_admin == 20) {
            return $menu;
        } else {
            return self::filter_menu($menu, $admin_id);
        }
    }

    //过滤菜单，只做到3层过滤，超过4层不支持，第三层作为具体菜单层
    public static function filter_menu($menu = null, $admin_id = null) {

        $permission = self::get_current_admin_permission($admin_id);
        if (empty($permission)) {
            //如果在 admin_group  admin_permission  admin 三表关系有问题查询会有问题，就会返回false，就直接返回空，没有菜单
            throw new \Exception(‘未获得当前用户权限菜单‘);
        }

        //先测试使用，可能存在bug
        foreach ($menu as $k => &$v) {
            foreach ($v[‘child‘] as $kk => &$vv) {
                foreach ($vv[‘child‘] as $kkk => &$vvv) {
                    if (!in_array($vvv[‘id‘], $permission)) {
                        unset($menu[$k][‘child‘][$kk][‘child‘][$kkk]);
                    }
                }
                if (empty($vv[‘child‘])) {
                    unset($menu[$k][‘child‘][$kk]);
                }
            }
            if (empty($v[‘child‘])) {
                unset($menu[$k]);
            }
        }
        return $menu;
    }

    //获取当前用户的权限ID集合数组
    public static function get_current_admin_permission($admin_id = null) {
        $result = Admin::where(‘id‘, $admin_id)->first([‘admin_group_ids‘]);
        $result_new = $result->toArray();
        if (empty($result_new[‘admin_group_ids‘])) {
            throw new \Exception(‘该用户未设置权限‘);
        }
        $admin_group_ids = explode(‘,‘, $result_new[‘admin_group_ids‘]);

        $results = AdminGroup::whereIn(‘id‘, $admin_group_ids)->get([‘permission_ids‘])->toArray();
        if (empty($results)) {
            throw new \Exception(‘系统权限组设置有问题‘);
        }
        //合并 permission_ids 在做查询，减少查询，提高性能
        $permission_ids = [];
        foreach ($results as $k => &$v) {
            //空，unset防止出错
            if (empty($v[‘permission_ids‘])) {
                unset($v);
            } else {
                $v = explode(‘,‘, trim($v[‘permission_ids‘], ‘,‘));
                foreach ($v as $kk => $vv) {
                    $permission_ids[] = $vv;
                }
            }
        }
        $permission_ids_array = array_unique($permission_ids);

        //防止数据出错
        $result_2 = AdminPermission::wherein(‘id‘, $permission_ids_array)->get([‘id‘])->toArray();
        if (empty($result_2)) {
            throw new \Exception(‘未获得权限数据‘);
        }
        $return_array = array();
        foreach ($result_2 as $key => $value) {
            $return_array[] = $value[‘id‘];
        }
        return $return_array;
    }

    //递归数据
    public static function tree_menu($menu = null, $parent = 0) {
        $tree = array();
        foreach ($menu as $v) {
            if ($v[‘parent_permission_id‘] == $parent) {
                $v[‘child‘] = self::tree_menu($menu, $v[‘id‘]);
                if (empty($v[‘child‘])) {
                    unset($v[‘child‘]);
                }
                $tree[] = $v;
            }
        }
        return $tree;
    }