day11 权限分配之角色管理
权限分配总体设计
用户管理知识点
为了方便开发权限分配功能我们需要把权限校验中间件注释掉，基础模板中依赖中间件的菜单功能注释
项目目录
rbac应用下配置路由
rbac/urls.py
#! -*- coding:utf-8 -*-
from django.urls import path, re_path
from rbac.views import role
app_name='rbac'
urlpatterns = [
path(r"role/list/", role.role_list, name="role_list"),
path(r"role/add/", role.role_add, name="role_add"),
re_path(r"^role/edit/(?P\d+)/$", role.role_edit, name="role_edit"),
re_path(r"^role/del/(?P\d+)/$", role.role_del, name="role_del"),
]
总路由配置
luffy_permission_simon/urls.py
"""luffy_permission_simon URL Configuration
The `urlpatterns` list routes URLs to views. For more information please see:
https://docs.djangoproject.com/en/3.2/topics/http/urls/
Examples:
Function views
1. Add an import: from my_app import views
2. Add a URL to urlpatterns: path('', views.home, name='home')
Class-based views
1. Add an import: from other_app.views import Home
2. Add a URL to urlpatterns: path('', Home.as_view(), name='home')
Including another URLconf
1. Import the include() function: from django.urls import include, path
2. Add a URL to urlpatterns: path('blog/', include('blog.urls'))
"""
from django.contrib import admin
from django.conf.urls import include, url
from django.urls import include, path
from web.views import account
from rbac import urls as rbac_urls
urlpatterns = [
url('^admin/', admin.site.urls),
path('login/', account.login), # URLPattern
url('^', include('web.urls')),
path('', include(rbac_urls)), # URLResolver
]
forms组件设置
rbac/forms/role.py
#! -*- coding:utf-8 -*-
from django import forms
from django.forms.widgets import TextInput
from rbac import models
class RoleModelForm(forms.ModelForm):
class Meta:
model = models.Role
fields = ["title", ]
error_messages = {
'title': {'required': '角色名称不能为空！'}
}
widgets = {
'title': TextInput(attrs={'class': 'form-control'})
}
角色管理后端代码编写
rbac/views/role.py
#! -*- coding:utf-8 -*-
from django.shortcuts import render, redirect, HttpResponse
from django.urls import reverse
from django import forms
from django.forms.widgets import TextInput
from rbac import models
from rbac.forms.role import RoleModelForm
def role_list(request):
role_queryset = models.Role.objects.all()
return render(request, 'rbac/role_list.html', {"roles": role_queryset})
def role_add(request):
if request.method == "GET":
form = RoleModelForm()
return render(request, "rbac/change.html", {"form": form})
form = RoleModelForm(data=request.POST)
if form.is_valid():
form.save()
return redirect(reverse('rbac:role_list'))
return render(request, "rbac/change.html", {"form": form})
def role_edit(request, pk):
role_obj = models.Role.objects.filter(pk=pk).first()
if not role_obj:
return HttpResponse('角色不存在')
if request.method == 'POST':
form = RoleModelForm(request.POST, instance=role_obj)
if form.is_valid():
form.save()
return redirect(reverse('rbac:role_list'))
return render(request, 'rbac/change.html', {"form": form})
form = RoleModelForm(instance=role_obj) # GET 请求instance 携带默认的值
return render(request, 'rbac/change.html', {"form": form})
def role_del(request,pk):
# 很多页面都会有取消的跳转，起一个共有的名字，传给模板，这样模板中每次用同一个名字即可返回各自的起始页面
cancel_url = reverse('rbac:role_list')
role_queryset = models.Role.objects.filter(pk=pk)
if not role_queryset:
return HttpResponse('角色不存在！')
if request.method == 'POST':
role_queryset.delete()
return redirect(cancel_url)
return render(request, 'rbac/delete.html', locals())
前端模板编写
角色列表rbac/templates/rbac/role_list.html
{% extends 'layout.html' %}
{% block content %}
{% endblock %}
角色添加rbac/templates/rbac/role_add.html
{% extends 'layout.html' %}
{% load static %}
{% block css %}
{% endblock %}
{% block content %}
{% endblock %}
编辑模板通用
rbac/templates/rbac/change.html
{% extends 'layout.html' %}
{% load static %}
{% block css %}
{% endblock %}
{% block content %}
{% endblock %}
删除模板通用
{% extends 'layout.html' %}
{% block content %}
{% endblock %}