Casbin之Policy策略存储
1.讲解及创建数据库
CREATE DATABASE IF NOT EXISTS casbin;
USE casbin;
CREATE TABLE IF NOT EXISTS casbin_rule (
p_type VARCHAR(100) NOT NULL,
v0 VARCHAR(100),
v1 VARCHAR(100),
v2 VARCHAR(100),
v3 VARCHAR(100),
v4 VARCHAR(100),
v5 VARCHAR(100)
);
INSERT INTO casbin_rule VALUES
('p', 'dajun', 'data1', 'read', '', '', ''),
('p', 'lizi', 'data2', 'write', '', '', '');
2.model.conf文件
[request_definition]
r = sub,obj,act
[policy_definition]
p = sub,obj,act
[policy_effect]
e = some(where (p.eft == allow))
[matchers]
m = r.sub == p.sub && r.obj == p.obj && r.act == p.act
3.Policy.csv文件
无这个文件
4.main
package main
import (
"fmt"
"log"
"github.com/casbin/casbin/v2"
gormadapter "github.com/casbin/gorm-adapter/v2" //注意,需要go mod tidy下,把这个适配器依赖下载下
_ "github.com/go-sql-driver/mysql"
)
func check(e *casbin.Enforcer, sub, obj, act string) {
ok, _ := e.Enforce(sub, obj, act)
if ok {
fmt.Printf("%s CAN %s %s\n", sub, act, obj)
} else {
fmt.Printf("%s CANNOT %s %s\n", sub, act, obj)
}
}
func main() {
//注意:不能写成root:414524@tcp(127.0.0.1:3306)/casbin,即它默认会取连接casbin这个数据库;
//如果写了root:414524@tcp(127.0.0.1:3306)/casbin,则会返回错误:Error 1049: Unknown database 'casbincasbin'
a, err := gormadapter.NewAdapter("mysql", "root:414524@tcp(127.0.0.1:3306)/")
if err != nil {
log.Fatalf("数据库连接错误:%v\n", err)
}
e, err := casbin.NewEnforcer("./casbin/model.conf", a)
if err != nil {
log.Fatalf("NewEnforecer failed:%v\n", err)
}
check(e, "dajun", "data1", "read")
check(e, "lizi", "data2", "write")
check(e, "dajun", "data1", "write")
check(e, "dajun", "data2", "read")
}