//管理员表CREATE TABLE `qz_admin` (  `admin_id` smallint(5) unsigned NOT NULL AUTO_INCREMENT COMMENT '用户id',  `admin_name` varchar(60) NOT NULL DEFAULT '' COMMENT '用户名',  `email` varchar(60) NOT NULL DEFAULT '' COMMENT 'email',  `password` varchar(32) NOT NULL DEFAULT '' COMMENT '密码',  `add_time` int(11) NOT NULL DEFAULT '0' COMMENT '添加时间',  `last_login` int(11) NOT NULL DEFAULT '0' COMMENT '最后登录时间',  `last_ip` varchar(15) NOT NULL DEFAULT '' COMMENT '最后登录ip',  `nav_list` text NOT NULL COMMENT '权限',  `role_id` smallint(5) DEFAULT NULL COMMENT '角色id',  PRIMARY KEY (`admin_id`),  KEY `user_name` (`user_name`) USING BTREE) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;//角色表CREATE TABLE `qz_admin_role` (  `role_id` smallint(6) unsigned NOT NULL AUTO_INCREMENT COMMENT '角色ID',  `role_name` varchar(30) DEFAULT NULL COMMENT '角色名称',  `act_list` text COMMENT '权限列表',  `role_desc` varchar(255) DEFAULT NULL COMMENT '角色描述',  PRIMARY KEY (`role_id`)) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;//功能菜单表CREATE TABLE `qz_system_menu` (  `id` smallint(6) unsigned NOT NULL AUTO_INCREMENT,  `name` varchar(50) DEFAULT NULL COMMENT '权限名字',  `group` varchar(20) DEFAULT NULL COMMENT '所属分组',  `right` text COMMENT '权限码(控制器+动作)',  `is_del` tinyint(1) DEFAULT '0' COMMENT '删除状态 1删除,0正常',  PRIMARY KEY (`id`)) ENGINE=InnoDB AUTO_INCREMENT=18 DEFAULT CHARSET=utf8;

function getMenuList($act_list){    //根据角色权限过滤菜单    $menu_list = getAllMenu();    if($act_list != 'all'){        $right = M('system_menu')->where("id in ($act_list)")->cache(false)->getField('right',true);        $role_right = "";        foreach ($right as $val){            $role_right .= $val.',';        }        $role_right = explode(',', $role_right);        foreach($menu_list as $k=>$mrr){            foreach ($mrr['sub_menu'] as $j=>$v){                if(!in_array($v['control'].'Controller@'.$v['act'], $role_right)){                    unset($menu_list[$k]['sub_menu'][$j]);//过滤菜单                }            }        }    }    return $menu_list;}function getAllMenu(){    return    array(            'system' => array('name'=>'系统设置','icon'=>'fa-cog','sub_menu'=>array(                    array('name'=>'网站设置','act'=>'index','control'=>'System'),                    array('name'=>'友情链接','act'=>'linkList','control'=>'Article'),                    array('name'=>'自定义导航','act'=>'navigationList','control'=>'System'),                    array('name'=>'区域管理','act'=>'region','control'=>'Tools'),                    array('name'=>'权限资源列表','act'=>'right_list','control'=>'System'),            )),            'access' => array('name' => '权限管理', 'icon'=>'fa-gears', 'sub_menu' => array(                    array('name' => '管理员列表', 'act'=>'index', 'control'=>'Admin'),                    array('name' => '角色管理', 'act'=>'role', 'control'=>'Admin'),                    array('name' => '供应商管理', 'act'=>'supplier', 'control'=>'Admin'),                    array('name' => '管理员日志', 'act'=>'log', 'control'=>'Admin'),            )),            'member' => array('name'=>'会员管理','icon'=>'fa-user','sub_menu'=>array(                    array('name'=>'会员列表','act'=>'index','control'=>'User'),                    array('name'=>'会员等级','act'=>'levelList','control'=>'User'),            )),            'article' => array('name' => '文章管理', 'icon'=>'fa-comments', 'sub_menu' => array(                    array('name' => '文章列表', 'act'=>'articleList', 'control'=>'Article'),                    array('name' => '文章分类', 'act'=>'categoryList', 'control'=>'Article'),                    array('name' => '专题列表', 'act'=>'topicList', 'control'=>'Topic'),            ))    );}

//权限验证函数(TP), 入口初始化执行public function check_priv(){    $ctl = CONTROLLER_NAME;    $act = ACTION_NAME;    $act_list = session('act_list');    //无需验证的操作    $uneed_check = array('login','logout','vertifyHandle','vertify','imageUp','upload','login_task');    if($ctl == 'Index' || $act_list == 'all'){        //后台首页控制器无需验证,超级管理员无需验证        return true;    }elseif(strpos('ajax',$act) || in_array($act,$uneed_check)){        //所有ajax请求不需要验证权限        return true;    }else{        $role_right = "";        $right = M('system_menu')->where("id in ($act_list)")->cache(true)->getField('right',true);        foreach ($right as $val){            $role_right .= $val.',';        }        $role_right = explode(',', $role_right);        //检查是否拥有此操作权限        if(!in_array($ctl.'Controller@'.$act, $role_right)){            $this->error('您没有操作权限,请联系超级管理员分配权限',U('Admin/Index/index'));        }    }}

//权限分配，给角色添加、修改权限public function role_info(){    $role_id = I('get.role_id');    $tree = $detail = array();    if($role_id){        $detail = M('admin_role')->where("role_id=$role_id")->find();        $detail['act_list'] = explode(',', $detail['act_list']);        $this->assign('detail',$detail);    }    $right = M('system_menu')->order('id')->select();    foreach ($right as $val){        if(!empty($detail)){            $val['enable'] = in_array($val['id'], $detail['act_list']);        }        $modules[$val['group']][] = $val;    }    //权限组（对应数据表里面的group字段）    $group = array('system'=>'系统管理','access'=>'权限管理',article'=>'文章管理'，'member'=>'会员管理');    $this->assign('group',$group);    $this->assign('modules',$modules);    $this->display();}//权限分配保存public function roleSave(){    $data = I('post.');    $res = $data['data'];    $res['act_list'] = is_array($data['right']) ? implode(',', $data['right']) : '';    if(empty($data['role_id'])){        $r = D('admin_role')->add($res);    }else{        $r = D('admin_role')->where('role_id='.$data['role_id'])->save($res);    }    if($r){        adminLog('管理角色',__ACTION__);        $this->success("操作成功!",U('Admin/Admin/role_info',array('role_id'=>$data['role_id'])));    }else{        $this->success("操作失败!",U('Admin/Admin/role'));    }}