package server
import (
  .
  .
  .
  "os"
  "github.com/gin-gonic/gin"
)
// NewRouter 路由配置
func NewRouter() *gin.Engine {
  r := gin.Default()
  // 其他中间件
  .
  .
  .
  // 路由
  v1 := r.Group("/api/v1")
  {
    v1.POST("login", api.Login)
    auth := v1.Group("")
    //登录校验中间件
    auth.Use(middleware.AuthRequired())
    //关键代码：权限角色校验
    auth.Use(middleware.AuthCheckMiddleware)
    {
            .
            .
            .
      // 获取所有学校
      {
        auth.GET("/school/", api.GetSchoolInfo)
      }
      .
      .
      .
    }
  }
  return r
}

package middleware
import (
  .
  .
  .
  "fmt"
  "github.com/gin-gonic/gin"
  "net/http"
  "strings"
)
var AuthCheckMiddleware = authCheck()
func authCheck() gin.HandlerFunc {
  return func(c *gin.Context) {
    if admin, _ := c.Get("admin"); admin != nil {
      method := c.Request.Method
      url := c.Request.URL.Path
      adminInfo := admin.(**service.RunningClaims)
      isSuper := (*adminInfo).IsSuper //是否是超管
      roleId := (*adminInfo).RoleId
      if isSuper != 1 {
        fmt.Println("method:", method)
        fmt.Println("url:", url)
        permissionFunc := strings.ToLower(fmt.Sprintf("%s_%s", method, url))
        haveAuth := model.CheckRolePermission(uint(roleId), permissionFunc)
        fmt.Println("haveAuth  ", haveAuth)
        if !haveAuth {
          c.JSON(http.StatusOK, api.ReturnJson{http.StatusForbidden, "", "无权访问"})
          c.Abort()
        }
      }
      c.Next()
    }
  }
}

//角色部分
type StringArray []string
//角色
type Role struct {
  Id          int          `gorm:"column:id" form:"id" json:"id" comment:"自增id" sql:"int(11),PRI"`
  Name        string       `gorm:"column:name" form:"name" json:"name" comment:"角色名" sql:"varchar(255)"`
  Description string       `gorm:"column:description" form:"description" json:"description" comment:"描述" sql:"varchar(255)"`
  Permission  *StringArray `gorm:"type:json;column:permission" form:"permission" json:"permission" comment:"权限"`
}
func (data *StringArray) Scan(val interface{}) (err error) {
  if val == nil {
    return nil
  }
  if payload, ok := val.([]byte); ok {
    var value []string
    err = json.Unmarshal(payload, &value)
    if err == nil {
      *data = value
    }
  }
  return
}
func CheckRolePermission(roleId uint, permissionFunc string) bool {
  if roleId == 0 {
    return false
  }
  var myRole Role
  err := DB.Where("id = ?", roleId).First(&myRole).Error
  if err != gorm.ErrRecordNotFound {
    fmt.Printf("%v", myRole)
    permissions := myRole.Permission
    permissions.Scan(permissions)
    for _, permission := range *permissions {
      fmt.Println("permissionFunc:", permissionFunc)
      fmt.Println("permission:", permission)
      if strings.HasPrefix(permissionFunc, permission) {
        return true
      }
    }
  }
  return false
}

{
    "code": 403,
    "data": "",
    "message": "无权访问"
}

{
    "code": 200,
    "data": true,
    "message": "更新成功"
}