对后台管理员进行分角色，分类别管理，每个管理员登录账号后只显示自己负责的权限范围。
创建后台管理数据库
models.py文件内
# 管理员表 class Superuser(models.Model): super_id=models.AutoField(primary_key=True) super_name=models.CharField(max_length=255) super_pwd=models.CharField(max_length=255) role = models.ManyToManyField(to=\'Role\', ) #后台菜单表 class Menu(models.Model): """ 菜单表 """ name = models.CharField(verbose_name=\'菜单名\', max_length=255) path = models.CharField(verbose_name=\'路径\', max_length=255, null=True, blank=True) # null ：针对数据库，如果 null=True, 表示数据库的该字段可以为空，即在Null字段显示为YES。blank ：针对表单，如果 blank=True，表示你的表单填写该字段时可以不填，但是对数据库来说，没有任何影响 pid = models.ForeignKey(verbose_name=\'关联的权限\', to=\'Menu\', null=True, blank=True, related_name=\'parents\', help_text=\'父id\', on_delete=models.CASCADE) # def __str__(self): # return self.name # 权限表 class Permission(models.Model): """ 权限表 """ name = models.CharField(verbose_name=\'权限名\', max_length=255) path = models.CharField(verbose_name=\'路径\', max_length=255, null=True, blank=True) # null ：针对数据库，如果 null=True, 表示数据库的该字段可以为空，即在Null字段显示为YES。blank ：针对表单，如果 blank=True，表示你的表单填写该字段时可以不填，但是对数据库来说，没有任何影响 pid = models.ForeignKey(verbose_name=\'关联的权限\', to=\'Permission\', null=True, blank=True, related_name=\'parents\', help_text=\'父id\', on_delete=models.CASCADE) #1对多 menu = models.ForeignKey(verbose_name=\'所属菜单\', to=\'Menu\', null=True, blank=True, help_text=\'null表示不是菜单;非null表示是二级菜单\',on_delete=models.CASCADE) # def __str__(self): # return self.name #角色表 class Role(models.Model): """ 角色表 """ name = models.CharField(verbose_name=\'角色名\', max_length=255) access = models.CharField(verbose_name=\'可以访问的权限\', max_length=255, null=True, blank=True)
创建和迁移数据库命令
python manage.py makemigrations
python manage.py migrate
应用目录下定义中间件，my_middleware.py文件，用来使权限生效。
from django.utils.deprecation import MiddlewareMixin from django.shortcuts import HttpResponse,redirect from blog.models import Role,Superuser,Menu,Permission import json class AuthMiddleware(MiddlewareMixin): # 重写process_request方法 def process_request(self, request): # 如果路径中包含back即为后台路径 if \'back/\' in request.path: # 获取用户登录的id super_id = request.session.get(\'super_id\') # 判断是否登录，未登录则跳转至登录界面 if not super_id and request.path != \'/back/index/login/\': return redirect(\'/back/index/login/\') if super_id: # 判读当前登录用户，是否拥有访问此路径的权限 role_objs = Superuser.objects.filter(super_id=super_id).first().role.all().values(\'id\')# 查询用户角色 permission_obj = Permission.objects.filter(path=request.path).first() # 当前访问的权限id # 如果查询到有权限对象 if permission_obj: # 定义权限列表 permission_list=[] # 遍历角色对象 for role in role_objs: # print(role[\'id\']) # 获取角色的权限 access_obj=Role.objects.filter(id=role[\'id\']).first() # 向权限列表中添加数据 permission_list.extend(access_obj.access.split(",")) # print(permission_list) # 如果当前访问的权限id，不在权限列表汇总，返回无权限 if str(permission_obj.id) not in permission_list: if request.method==\'POST\': res={\'status\':1,\'info\':\'无权限\'} return HttpResponse(json.dumps(res)) # if permission_obj.id not in permission_list: return HttpResponse("无权限") else: return None
settings.py文件中添加定义的中间件
MIDDLEWARE = [ \'django.middleware.security.SecurityMiddleware\', \'django.contrib.sessions.middleware.SessionMiddleware\', \'django.middleware.common.CommonMiddleware\', \'django.middleware.csrf.CsrfViewMiddleware\', \'django.contrib.auth.middleware.AuthenticationMiddleware\', \'django.contrib.messages.middleware.MessageMiddleware\', \'django.middleware.clickjacking.XFrameOptionsMiddleware\', \'blog.my_middlewares.AuthMiddleware\', ]
写功能，
菜单管理功能
前端引入
<script src="/static/jQuery-1.8.2.min.js"></script> <script src="/static/layer/layer.js"></script>
前端html
#菜单列表、删除，编辑 <table class="tablelist"> <thead> <tr> {# <th><input name="" type="checkbox" value="" checked="checked"/></th>#} <th>菜单序号<i class="sort"><img src="/static/back/images/px.gif"/></i></th> <th>菜单名称</th> <th>菜单等级</th> <th>上级菜单</th> <th>操作</th> </tr> </thead> <tbody> {% for v in menu_list %} <tr> {# <td><input name="" type="checkbox" value=""/></td>#} <td>{{ forloop.counter }}</td> <td>{{ v.name }}</td> <td> <h6>一级菜单</h6> </td> <td> <h6>无</h6> </td> <td> <a href="javascript:;" data-id="{{ v.id }}" class="tablelink del_1">删除</a> <a href="/back/article/editor_menu_f/{{ v.id }}/" data-editor="{{ v.super_id }}" class="tablelink editor">编辑</a> </td> </tr> {% endfor %} {% for v in menu_list_z %} <tr> {# <td><input name="" type="checkbox" value=""/></td>#} <td>{{ forloop.counter }}</td> <td>{{ v.name }}</td> <td> <h6>二级菜单</h6> </td> <td> <h6>{{ v.pid.name }}</h6> </td> <td> <a href="javascript:;" data-id="{{ v.id }}" class="tablelink del_2">删除</a> <a href="/back/article/editor_menu_z/{{ v.id }}/" data-editor="{{ v.super_id }}" class="tablelink editor">编辑</a> </td> </tr> {% endfor %} </tbody> </table> #新增菜单 <form method="post" onsubmit="return false" id="menu_1"> {% csrf_token %} <table class="tablelist"> <thead> <tr> <th>新增一级菜单</th> </tr> <tr> <th style="border: 1px #9C9C9C solid;"><input type="text" placeholder="输入菜单名称" name="menu_name"> </th> </tr> </thead> </table> <input type="button" value="提交" id="onsubmit" style="width: 100px; height: 30px;"> </form> <br><br> <form method="post" onsubmit="return false" id="menu_2"> {% csrf_token %} <table class="tablelist"> <thead> <tr> <th>新增二级菜单</th> </tr> <tr> <th style="border: 1px #9C9C9C solid;"><input type="text" placeholder="输入菜单名称" name="menu_name"> </th> <th style="border: 1px #9C9C9C solid;"><input type="text" placeholder="输入菜单路径" name="menu_path"> </th> <th> <select name="pid"> <option value="" style="display: none">选择所属一级菜单</option> {% for v in menu_list %} <option value="{{ v.id }}">{{ v.name }}</option> {% endfor %} </select> </th> </tr> </thead> </table> <input type="button" value="提交" id="onsubmit2" style="width: 100px; height: 30px;"> </form>
前端js
<script> {# 添加一级菜单#} $(document).ready(function () { $(\'#onsubmit\').click(function () { $.post(\'/back/article/menu_add/\', $(\'#menu_1\').serialize(), function (data) { if (data[\'status\'] == 0) { layer.msg(data[\'info\']) location.href=\'/back/article/menu_add/\' } else { layer.msg(data[\'info\']) } }, \'json\') }) }) {#添加二级菜单#} $(document).ready(function () { $(\'#onsubmit2\').click(function () { $.post(\'/back/article/menu_add1/\', $(\'#menu_2\').serialize(), function (data) { if (data[\'status\'] == 0) { layer.msg(data[\'info\']) location.href=\'/back/article/menu_add/\' } else { layer.msg(data[\'info\']) } }, \'json\') }) }); {# 删除一级菜单#} $(document).ready(function () { $(\'.del_1\').click(function () { _this=this; layer.confirm(\'删除一级菜单会连带删除所属二级菜单，确定删除吗？\',{ btn:[\'确定\',\'取消\'] },function(){ id=$(_this).data(\'id\'); $.post(\'/back/article/menu_del_f/\',{\'id\':id,\'csrfmiddlewaretoken\':\'{{ csrf_token }}\'},function (data) { if (data[\'status\']==0){ layer.msg(data[\'info\']) location.href=\'/back/article/menu_add/\' }else { layer.msg(data[\'info\']) } },\'json\') },function () { }) }) }) {# 删除二级菜单#} $(document).ready(function () { $(\'.del_2\').click(function () { _this=this; layer.confirm(\'确定删除这个二级菜单吗？\',{ btn:[\'确定\',\'取消\'] },function(){ id=$(_this).data(\'id\'); $.post(\'/back/article/menu_del_z/\',{\'id\':id,\'csrfmiddlewaretoken\':\'{{ csrf_token }}\'},function (data) { if (data[\'status\']==0){ layer.msg(data[\'info\']) location.href=\'/back/article/menu_add/\' }else { layer.msg(data[\'info\']) } },\'json\') },function () { }) }) }) </script>
路由
# 新增一级菜单 re_path(\'article/menu_add/\', article.menu_add, name=\'article/menu_add/\'), # 新增二级菜单 re_path(\'article/menu_add1/\', article.menu_add1, name=\'article/menu_add1/\'), # 删除一级菜单 re_path(\'article/menu_del_f/\', article.menu_del_f, name=\'article/menu_del_f/\'), # 删除二级菜单 re_path(\'article/menu_del_z/\', article.menu_del_z, name=\'article/menu_del_z/\'), # 编辑一级菜单 re_path(\'article/editor_menu_f/(\d+)/\',article.editor_menu_f,name=\'article/editor_menu_f/\'), # 编辑二级菜单 re_path(\'article/editor_menu_z/(\d+)/\',article.editor_menu_z,name=\'article/editor_menu_z/\'),
方法
from collections import OrderedDict # 新增一级菜单 def menu_add(request): menu_list=Menu.objects.filter(pid__isnull=True) menu_list_z=Menu.objects.filter(pid__isnull=False) if request.method==\'POST\': res = {\'status\': None, \'info\': None} menu_name=request.POST.get(\'menu_name\') menu_name_f_obj=Menu.objects.filter(name=menu_name,pid_id__isnull=True) if menu_name_f_obj: res = {\'status\': 1, \'info\': \'菜单名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) if menu_name: menu_obj=Menu.objects.create(name=menu_name) if menu_obj: permission_obj=Permission.objects.create(name=menu_name,menu_id=menu_obj.id) res = {\'status\': 0, \'info\': \'添加成功\'} else: res = {\'status\': 1, \'info\': \'添加失败\'} return HttpResponse(json.dumps(res)) else: res = {\'status\': 2, \'info\': \'请输入菜单名称\'} return HttpResponse(json.dumps(res)) return render(request,\'article/menu_add.html\',locals()) # 添加二级菜单 def menu_add1(request): if request.method==\'POST\': res = {\'status\': None, \'info\': None} menu_name=request.POST.get(\'menu_name\') menu_path=request.POST.get(\'menu_path\') pid=request.POST.get(\'pid\') menu_name_z_obj = Menu.objects.filter(name=menu_name,pid_id__isnull=False) if menu_name_z_obj: res = {\'status\': 1, \'info\': \'菜单名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) if not menu_name: res = {\'status\': 1, \'info\': \'未输入菜单名称\'} return HttpResponse(json.dumps(res)) if not menu_path: res = {\'status\': 2, \'info\': \'未输入菜单路径\'} return HttpResponse(json.dumps(res)) if not pid: res = {\'status\': 3, \'info\': \'未选择所属一级菜单\'} return HttpResponse(json.dumps(res)) menu_obj=Menu.objects.create(name=menu_name,path=menu_path,pid_id=pid) if menu_obj: menu_id=Permission.objects.filter(menu_id=pid).first().id permission_obj=Permission.objects.create(name=menu_name,path=menu_path,menu_id=menu_obj.id,pid_id=menu_id) res = {\'status\': 0, \'info\': \'添加成功\'} else: res = {\'status\': 1, \'info\': \'添加失败\'} return HttpResponse(json.dumps(res)) # 删除一级菜单 def menu_del_f(request): if request.method==\'POST\': res = {\'status\': None, \'info\': None} menu_id=request.POST.get(\'id\') if not menu_id: res = {\'status\': 1, \'info\': \'异常\'} return HttpResponse(json.dumps(res)) menu_f=Menu.objects.filter(id=menu_id).delete() menu_z=Menu.objects.filter(pid_id=menu_id).delete() permission_f=Permission.objects.filter(menu_id=menu_id).values(\'id\').first() # print(permission_f[\'id\']) if permission_f: permission_z=Permission.objects.filter(pid_id=permission_f[\'id\']).delete() permission_f = Permission.objects.filter(menu_id=menu_id).delete() if menu_f and permission_f: res = {\'status\': 0, \'info\': \'删除成功\'} else: res = {\'status\': 2, \'info\': \'删除失败\'} return HttpResponse(json.dumps(res)) return HttpResponse(\'ok\') # 删除二级菜单 def menu_del_z(request): if request.method==\'POST\': res = {\'status\': None, \'info\': None} menu_id=request.POST.get(\'id\') if not menu_id: res = {\'status\': 1, \'info\': \'异常\'} return HttpResponse(json.dumps(res)) menu_obj=Menu.objects.filter(id=menu_id).delete() permission_obj=Permission.objects.filter(menu_id=menu_id).delete() if menu_obj and permission_obj: res = {\'status\': 0, \'info\': \'删除成功\'} else: res = {\'status\': 2, \'info\': \'删除失败,请联系技术人员\'} return HttpResponse(json.dumps(res)) return HttpResponse(\'ok\') # 编辑一级菜单 def editor_menu_f(request,id): menu_f_obj=Menu.objects.filter(id=id).first().name if request.method==\'POST\': menu_f_name=request.POST.get(\'menu_f\') if not menu_f_name: res = {\'status\': 1, \'info\': \'未输入菜单名称\'} return HttpResponse(json.dumps(res)) menu_f_name_obj=Menu.objects.filter(name=menu_f_name,pid_id__isnull=True) if menu_f_name_obj and menu_f_name != menu_f_obj: res = {\'status\': 1, \'info\': \'菜单名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) menu_obj=Menu.objects.filter(id=id).update(name=menu_f_name) permission_obj=Permission.objects.filter(menu_id=id).update(name=menu_f_name) if menu_obj and permission_obj: res = {\'status\': 0, \'info\': \'修改成功\'} else: res = {\'status\': 1, \'info\': \'修改失败，请联系技术人员\'} return HttpResponse(json.dumps(res)) return render(request,\'article/editor_menu_f.html\',locals()) # 编辑二级菜单 def editor_menu_z(request,id): menu_obj=Menu.objects.filter(id=id).first() menu_list=Menu.objects.filter(pid_id__isnull=True) if request.method == \'POST\': res = {\'status\': None, \'info\': None} menu_name = request.POST.get(\'menu_name\') menu_path = request.POST.get(\'menu_path\') pid = request.POST.get(\'pid\') menu_name_z_obj = Menu.objects.filter(name=menu_name, pid_id__isnull=False) if menu_name_z_obj and menu_name !=menu_obj.name: res = {\'status\': 1, \'info\': \'菜单名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) if not menu_name: res = {\'status\': 1, \'info\': \'未输入菜单名称\'} return HttpResponse(json.dumps(res)) if not menu_path: res = {\'status\': 2, \'info\': \'未输入菜单路径\'} return HttpResponse(json.dumps(res)) if not pid: res = {\'status\': 3, \'info\': \'未选择所属一级菜单\'} return HttpResponse(json.dumps(res)) menu_obj = Menu.objects.filter(id=id).update(name=menu_name, path=menu_path, pid_id=pid) if menu_obj: menu_id = Permission.objects.filter(menu_id=pid).first().id permission_obj = Permission.objects.filter(menu_id=id).update(name=menu_name, path=menu_path, pid_id=menu_id) res = {\'status\': 0, \'info\': \'修改成功\'} else: res = {\'status\': 1, \'info\': \'修改失败，请联系技术人员\'} return HttpResponse(json.dumps(res)) return render(request,\'article/editor_menu_z.html\',locals())
#角色管理功能
前端引入
<script src="/static/jQuery-1.8.2.min.js"></script> <script src="/static/layer/layer.js"></script>
前端页面
<div id="tab2" class="tabson"> <table class="tablelist"> <thead> <tr> {# <th><input name="" type="checkbox" value="" checked="checked"/></th>#} <th>角色序号<i class="sort"><img src="/static/back/images/px.gif"/></i></th> <th>角色名称</th> {# <th>角色权限</th>#} <th>操作</th> </tr> </thead> <tbody> {% for v in role_obj %} <tr> {# <td><input name="" type="checkbox" value=""/></td>#} <td>{{ forloop.counter }}</td> <td>{{ v.name }}</td> {% if v.id == 4 %} <td> <h6>不能对超级管理员进行操作</h6> </td> {% else %} <td> <a href="javascript:;" data-id="{{ v.id }}" class="tablelink del">删除</a> <a href="/back/article/editor_role/{{ v.id }}/" data-editor="{{ v.super_id }}" class="tablelink editor">编辑</a> {# <a href="/back/article/role_add1/{{ v.id }}"> >>设置权限</a>#} </td> {% endif %} </tr> {% endfor %} </tbody> </table> {#######################################################################} <br><br> </div> <th><a href="/back/article/role_add1/">>>新增角色 </a></th>
新增角色的html
<script src="/static/jQuery-1.8.2.min.js"></script> <script src="/static/layer/layer.js"></script> <form method="post" onsubmit="return false"> {% csrf_token %} <table class="tablelist"> <thead> <tr> <th>角色名称: <input type="text" name="role_name" placeholder="输入角色名称"></th> </tr> <tr> <th> 选择所有权限: <br> {% for k,v in permission_all.items %} <input class="checkall" type="checkbox" name="check[]" id="{{ v.id }}" value="{{ v.id }}" {% if v.id|safe in permission_current %} checked="true\'" {% endif %}> <label for="{{ v.id }}">{{ v.name }}</label> <div>{% for v2 in v.children %}<input class="check" type="checkbox" id="{{ v2.id }}" value="{{ v2.id }}" name="check[]" {% if v2.id|safe in permission_current %} checked="true\'" {% endif %}><label for="{{ v2.id }}">{{ v2.name }}</label> {% endfor %}</div> {% endfor %} </th> </tr> </thead> </table> <input type="button" value="提交" id="onsubmit" style="width: 100px; height: 30px;"> <br><br> </form> #js <script> {# 新建角色#} $(document).ready(function () { $(\'#onsubmit\').click(function () { _this = this; id = $(_this).data(\'id\'); console.log(id); $.post(\'/back/article/role_add1/\', $(\'form\').serialize(), function (data) { if (data[\'status\'] == 0) { layer.msg(data[\'info\']); location.href=\'/back/article/role_add/\' } else { layer.msg(data[\'info\']) } }, \'json\') }) }); {#局部全选全不选#} $(document).on(\'click\',\'.checkall\',function () { $(this).next().next().children().prop(\'checked\',$(this).prop(\'checked\')) }); $(document).on(\'click\',\'.check\',function () { $(this).parent().prev().prev().prop(\'checked\',!$(\'%s:not(:checked)\'%$(this).siblings()).length) }); </script>
前端js
<script> {# 增加职位#} $(document).ready(function () { $(\'#onsubmit\').click(function () { $.post(\'/back/article/role_add/\', $(\'#role_1\').serialize(), function (data) { if (data[\'status\'] == 0) { layer.msg(data[\'info\']); location.href = \'/back/article/role_add/\' } else { layer.msg(data[\'info\']) } }, \'json\') }) }); {# 删除管理员#} $(\'.del\').click(function () { _this = this; layer.confirm(\'删除后不可恢复，确定删除吗？\', { btn: [\'确定\', \'取消\'] }, function () { id = $(_this).data(\'id\'); $.post(\'/back/article/role_del/\', {\'id\': id, \'csrfmiddlewaretoken\': \'{{ csrf_token }}\'}, function (data) { if (data[\'status\'] == 0) { layer.msg(data[\'info\']); $(_this).parent().parent().remove() } else { layer.msg(data[\'info\']) } }, \'json\') }, function () { }); }); </script>
路由
# 角色列表 re_path(\'article/role_add/\', article.role_add, name=\'article/role_add/\'), # 新增角色 re_path(\'article/role_add1/\', article.role_add1, name=\'article/role_add1/\'), # 删除角色 re_path(\'article/role_del/\', article.role_del, name=\'article/role_del/\'), # 编辑角色 re_path(\'article/editor_role/(\d+)/\',article.editor_role,name=\'article/editor_role/\'),
方法
# 角色列表 def role_add(request): permission_obj=Permission.objects.filter(pid__isnull=False) role_obj=Role.objects.all() permission_list=[] permission_obj_new=Permission.objects.filter(pid__isnull=True) # for i in permission_obj_new: # permission_list.append(i.id) # print(permission_list) # print(permission_obj_new) if request.method==\'POST\': res = {\'status\': None, \'info\': None} role=request.POST.get(\'role\') if not role: res = {\'status\': 1, \'info\': \'未输入职位名称\'} return HttpResponse(json.dumps(res)) role_new=Role.objects.create(name=role) if role_new: res = {\'status\': 0, \'info\': \'添加成功\'} else: res = {\'status\': 2, \'info\': \'添加失败\'} return HttpResponse(json.dumps(res)) return render(request,\'article/role_add.html\',locals()) # 新增角色 def role_add1(request): # permission_current1 = Role.objects.filter(id=id).first() # if permission_current1.access: # permission_current = permission_current1.access.split(",") # print(permission_current) permission_all = OrderedDict() permission = Permission.objects.filter(pid__isnull=True).all() for v in permission: permission2 = Permission.objects.filter(pid=v.id).all() permission_all[v.id] = { \'id\': v.id, \'name\': v.name, \'path\': v.path, \'children\': permission2 } # role_obj=Role.objects.filter(id=id).first() # permission_obj = Permission.objects.filter(pid__isnull=False) if request.method==\'POST\': name=request.POST.get(\'role_name\') if not name: res = {\'status\': 1, \'info\': \'未输入角色名称\'} return HttpResponse(json.dumps(res)) role_name_obj=Role.objects.filter(name=name) if role_name_obj: res = {\'status\': 1, \'info\': \'角色名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) check=request.POST.getlist(\'check[]\') chk=\',\'.join(check) role_obj = Role.objects.create(name=name,access=chk) # new_role_obj=Role.objects.filter(id=id).update(access=chk) if role_obj: res = {\'status\': 0, \'info\': \'添加成功\'} else: res = {\'status\': 1, \'info\': \'添加失败\'} return HttpResponse(json.dumps(res)) return render(request,\'article/role_add1.html\',locals()) # 删除角色 def role_del(request): if request.method==\'POST\': res = {\'status\': None, \'info\': None} role_id=request.POST.get(\'id\') if not role_id: res = {\'status\': 1, \'info\': \'未选择要删除的角色\'} return HttpResponse(json.dumps(res)) role_del=Role.objects.filter(id=role_id).delete() if role_del: res = {\'status\': 0, \'info\': \'删除成功\'} else: res = {\'status\': 2, \'info\': \'删除失败,请联系技术人员\'} return HttpResponse(json.dumps(res)) return HttpResponse(\'ok\') # 编辑角色 def editor_role(request,id): role_obj=Role.objects.filter(id=id).first() permission_current1 = Role.objects.filter(id=id).first() if permission_current1.access: permission_current = permission_current1.access.split(",") # print(permission_current) permission_all = OrderedDict() permission = Permission.objects.filter(pid__isnull=True).all() for v in permission: permission2 = Permission.objects.filter(pid=v.id).all() permission_all[v.id] = { \'id\': v.id, \'name\': v.name, \'path\': v.path, \'children\': permission2 } if request.method==\'POST\': check = request.POST.getlist(\'check[]\') # print(check) chk = \',\'.join(check) new_role_obj = Role.objects.filter(id=id).update(access=chk) role_name=request.POST.get(\'role_name\') if not role_name: res = {\'status\': 1, \'info\': \'未输入角色名称\'} return HttpResponse(json.dumps(res)) role_name_old_obj=Role.objects.filter(name=role_name) if role_name_old_obj and role_name != role_obj.name: res = {\'status\': 1, \'info\': \'角色名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) role_name_obj=Role.objects.filter(id=id).update(name=role_name) if role_name_obj and new_role_obj: res = {\'status\': 0, \'info\': \'修改成功\'} else: res = {\'status\': 1, \'info\': \'修改失败，请联系技术人员\'} return HttpResponse(json.dumps(res)) return render(request,\'article/editor_role.html\',locals())
#非菜单权限功能
前端页面
<table class="tablelist"> <form method="post" onsubmit="return false"> {% csrf_token %} <thead> <tr> <th>权限序号</th> <th>权限名称</th> <th>操作</th> </tr> </thead> <thead> {% for v in permission_obj %} <tr> <th>{{ forloop.counter }}</th> <th>{{ v.name }}</th> <th> <a href="javascript:;" data-id="{{ v.id }}" class="tablelink del">删除</a> <a href="/back/article/editor_permission_it/{{ v.id }}" data-editor="{{ v.id }}" class="tablelink editor">编辑</a> </th> </tr> {% endfor %} </thead> </form> </table> <form method="post" onsubmit="return false" id="menu_2"> {% csrf_token %} <table class="tablelist"> <thead> <tr> <th colspan="2">新增权限</th> </tr> <tr> <th style="border: 1px #9C9C9C solid;"><input type="text" placeholder="输入权限名称" name="permission_name"> </th> <th style="border: 1px #9C9C9C solid;"><input type="text" placeholder="输入权限路径" name="permission_path"> </th> </tr> </thead> </table> <input type="button" value="提交" id="onsubmit2" style="width: 100px; height: 30px;"> </form>
前端js
<script> {# 删除其他权限#} $(\'.del\').click(function () { _this=this layer.confirm(\'删除后不可恢复，确定删除吗？\',{ btn:[\'确定\',\'取消\'] },function(){ id=$(_this).data(\'id\'); $.post(\'/back/article/permission_it_del/\',{\'id\':id,\'csrfmiddlewaretoken\':\'{{ csrf_token }}\'},function (data) { if (data[\'status\']==0){ layer.msg(data[\'info\']); $(_this).parent().parent().remove() }else{ layer.msg(data[\'info\']) } },\'json\') },function () { }); }); {#添加权限#} $(document).ready(function () { $(\'#onsubmit2\').click(function () { $.post(\'/back/article/permission_list/\', $(\'#menu_2\').serialize(), function (data) { if (data[\'status\'] == 0) { layer.msg(data[\'info\']); location.href=\'/back/article/permission_list/\' } else { layer.msg(data[\'info\']) } }, \'json\') }) }); </script>
路由
# 其他权限 re_path(\'article/permission_list/\',article.permission_list,name=\'article/permission_list/\'), # 删除其他权限 re_path(\'article/permission_it_del/\',article.permission_it_del,name=\'article/permission_it_del/\'), # 编辑非菜单权限 re_path(\'article/editor_permission_it/(\d+)/\',article.editor_permission_it,name=\'article/editor_permission_it/\'),
方法
# 其他权限 def permission_list(request): permission_obj=Permission.objects.filter(menu_id__isnull=True,pid_id__isnull=True) if request.method==\'POST\': permission_name=request.POST.get(\'permission_name\') permission_path=request.POST.get(\'permission_path\') print(permission_name,permission_path) if not permission_name: res = {\'status\': 1, \'info\': \'未输入权限名称\'} return HttpResponse(json.dumps(res)) if not permission_path: res = {\'status\': 2, \'info\': \'未输入权限路径\'} return HttpResponse(json.dumps(res)) permission_name_obj=Permission.objects.filter(name=permission_name,menu_id__isnull=True,pid_id__isnull=True) if permission_name_obj: res = {\'status\': 2, \'info\': \'权限名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) permission_new_obj=Permission.objects.create(name=permission_name,path=permission_path) if permission_new_obj: res = {\'status\': 0, \'info\': \'添加成功\'} else: res = {\'status\': 1, \'info\': \'添加失败\'} return HttpResponse(json.dumps(res)) return render(request,\'article/permisson_list.html\',locals()) # 删除其他权限 def permission_it_del(request): if request.method==\'POST\': id=request.POST.get(\'id\') permission_del_obj=Permission.objects.filter(id=id).delete() if permission_del_obj: res = {\'status\': 0, \'info\': \'删除成功\'} else: res = {\'status\': 0, \'info\': \'删除失败\'} return HttpResponse(json.dumps(res)) return HttpResponse(\'ok\') # 编辑其他权限 def editor_permission_it(request,id): permission_obj=Permission.objects.filter(id=id).first() if request.method==\'POST\': permission_name=request.POST.get(\'permission_name\') permission_path=request.POST.get(\'permission_path\') if not permission_name: res = {\'status\': 1, \'info\': \'未输入权限名称\'} return HttpResponse(json.dumps(res)) if not permission_path: res = {\'status\': 2, \'info\': \'未输入权限路径\'} return HttpResponse(json.dumps(res)) permission_name_obj=Permission.objects.filter(name=permission_name) if permission_name_obj and permission_name != permission_obj.name: res = {\'status\': 1, \'info\': \'权限名称已存在，请重新编辑\'} return HttpResponse(json.dumps(res)) permission_new_obj=Permission.objects.filter(id=id).update(name=permission_name,path=permission_path) if permission_new_obj: res = {\'status\': 0, \'info\': \'修改成功\'} else: res = {\'status\': 1, \'info\': \'修改失败，请联系技术人员\'} return HttpResponse(json.dumps(res)) return render(request,\'article/editor_permission_it.html\',locals())
#管理员列表功能
前端html
<div id="tab2" class="tabson"> <table class="tablelist"> <thead> <tr> {# <th><input name="" type="checkbox" value="" checked="checked"/></th>#} <th>管理员序号<i class="sort"><img src="/static/back/images/px.gif"/></i></th> <th>管理员名称</th> <th>管理员权限</th> <th>操作</th> </tr> </thead> <tbody> {% for v in super_obj %} <tr> {# <td><input name="" type="checkbox" value=""/></td>#} <td>{{ forloop.counter }}</td> <td>{{ v.super_name }}</td> <td>{% for v2 in v.role.all %} {{ v2.name }} {% endfor %} </td> {% if v.role.first.id == 4 %} <td> <h6>不能对超级管理员进行操作</h6> </td> {% else %} <td> <a href="javascript:;" data-id="{{ v.super_id }}" class="tablelink del">删除</a> <a href="/back/article/editor_back/{{ v.super_id }}" data-editor="{{ v.super_id }}" class="tablelink editor">编辑</a> <a href="/back/article/permission_add1/{{ v.super_id }}"> >>分配权限</a> </td> {% endif %} </tr> {% endfor %} </tbody> </table> <div style="float: right;"> <nav aria-label="Page navigation"> <ul class="pagination"> {% if article_obj.has_previous %} <li class="previous"><a href="/back/article/super_list/?page={{ article_obj.previous_page_number }}">上一页</a> </li> {% else %} <li class="previous disabled"><a href="#">上一页</a></li> {% endif %} {% for num in pageRange %} <li {% if num == currentPage %}class=" active"{% endif %}><a href="?page={{ num }}">{{ num }}</a></li> {% endfor %} {% if article_obj.has_next %} <li class="next"><a href="/back/article/super_list/?page={{ article_obj.next_page_number }}">下一页</a> </li> {% else %} <li class="next disabled"><a href="#">下一页</a></li> {% endif %} </ul> </nav> </div>
前端js
<script> {# 删除管理员#} $(\'.del\').click(function () { _this=this layer.confirm(\'删除后不可恢复，确定删除吗？\',{ btn:[\'确定\',\'取消\'] },function(){ id=$(_this).data(\'id\'); $.post(\'/back/article/super_delete/\',{\'id\':id,\'csrfmiddlewaretoken\':\'{{ csrf_token }}\'},function (data) { if (data[\'status\']==0){ layer.msg(data[\'info\']); $(_this).parent().parent().remove() }else{ layer.msg(data[\'info\']) } },\'json\') },function () { }); }); </script>
路由
# 给管理员重新分配角色（权限） re_path(\'article/permission_add1/(\d+)/\', article.permission_add1,name=\'article/permission_add1/\'), # 编辑管理员信息 re_path(\'article/editor_back/(\d+)/\', article.editor_back,name=\'article/editor_back/\'), # 删除管理员 re_path(\'article/super_delete/\', article.super_delete,name=\'article/super_delete/\'),
方法
# 删除管理员 def super_delete(request): super_name=request.session.get(\'super_name\') res={\'status\':None,\'info\':None} id=request.POST.get(\'id\') super_del=Superuser.objects.filter(super_id=id).delete() if super_del: res[\'status\']=0 res[\'info\']=\'删除成功\' else: res[\'status\'] = 1 res[\'info\'] = \'删除失败\' return HttpResponse(json.dumps(res)) # 修改管理员信息 def editor_back(request,id): super_name = request.session.get(\'super_name\') res = {\'status\': None, \'info\': None} super_obj=Superuser.objects.filter(super_id=id).first() if request.method==\'POST\': super_name = Superuser.objects.filter(super_id=id).first().super_name new_super_name = request.POST.get(\'super_name\') new_super_pwd = request.POST.get(\'super_pwd\') if not new_super_name: res = {\'status\': 4, \'info\': \'未填写帐号\'} return HttpResponse(json.dumps(res)) if not new_super_pwd: res = {\'status\': 5, \'info\': \'未填写密码\'} return HttpResponse(json.dumps(res)) old_super_name = Superuser.objects.filter(super_name=new_super_name) if old_super_name and new_super_name != super_name: res = {\'status\': 1, \'info\': \'帐号已存在\'} else: super_obj = Superuser.objects.filter(super_id=id).update(super_name=new_super_name, super_pwd=make_password(new_super_pwd)) if super_obj: res = {\'status\': 0, \'info\': \'修改成功\'} else: res = {\'status\': 2, \'info\': \'修改失败\'} return HttpResponse(json.dumps(res)) return HttpResponse(json.dumps(res)) # return HttpResponse(json.dumps(res),locals()) return render(request,\'article/editor_back.html\',locals()) # 分配权限 def permission_add1(request,id): print(id) super_obj=Superuser.objects.filter(super_id=id).first() role_obj=Role.objects.all() role_obj_new=Superuser.objects.filter(super_id=id).first().role.all().values(\'id\') role_list=[] for i in role_obj_new: print(i[\'id\']) role_list.append(str(i[\'id\'])) print(role_list) if request.method==\'POST\': res = {\'status\': None, \'info\': None} check=request.POST.getlist(\'check[]\') super_obj.role.clear() for i in check: super_obj.role.add(i) res = {\'status\': 0, \'info\': \'成功\'} return HttpResponse(json.dumps(res)) return render(request,\'article/permission_add1.html\',locals())
#添加管理员功能
前端html
<form method="post" onsubmit="return false"> {% csrf_token %} <table class="tablelist"> <thead> <tr> <th>超级管理员名称<i class="sort"><img src="/static/back/images/px.gif" /></i></th> <th>密码</th> <th>设置权限</th> <th>操作</th> </tr> <tr> <th style="border: 1px #9C9C9C solid;"><input type="text" placeholder="输入管理员名称" name="super_name"></th> <th style="border: 1px #9C9C9C solid;"><input type="password" placeholder="输入密码" name="super_pwd"></th> <th style="border: 1px #9C9C9C solid;">{% for v in role_obj %} {% if v.id == 4 %} <input type="checkbox" name="check[]" id="{{ v.id }}" value="{{ v.id }}" {% if v.id|safe in role_list %} checked="true\'" {% endif %} onclick="layer.msg(\'普通用户不可设为超级管理员\'); return false"> <label for="{{ v.id }}">{{ v.name }}</label> {% else %} <input type="checkbox" name="check[]" id="{{ v.id }}" value="{{ v.id }}" {% if v.id|safe in role_list %} checked="true\'" {% endif %}> <label for="{{ v.id }}">{{ v.name }}</label> {# <div>{% for v2 in v.children %}<input type="checkbox" id="{{ v2.id }}" value="{{ v2.id }}" name="check[]" {% if v2.id|safe in permission_current %} checked="true\'" {% endif %}><label for="{{ v2.id }}">{{ v2 }}</label> {% endfor %}</div>#} {% endif %} {% endfor %}</th> <th style="border: 1px #9C9C9C solid;"><input type="button" value="提交" id="onsubmit"></th> </tr> </thead> </table> </form>
前端js
<script> $(document).ready(function () { $(\'#onsubmit\').click(function () { $.post(\'/back/article/super_add/\',$(\'form\').serialize(),function (data) { if (data[\'status\']==0){ layer.msg(data[\'info\']); location.href=\'/back/article/super_list/\' } else { layer.msg(data[\'info\']) } },\'json\') }) }) </script>
路由
# 添加管理员功能 re_path(\'article/super_add/\', article.super_add, name=\'article/super_add/\'),
方法
# 新增管理员 def super_add(request): role_obj = Role.objects.all() if request.method == \'POST\': res={"status":None,\'info\':None} super_name=request.POST.get(\'super_name\') super_back_pwd=request.POST.get(\'super_pwd\') super_pwd=make_password(request.POST.get(\'super_pwd\')) if super_name and super_back_pwd: super_old_obj=Superuser.objects.filter(super_name=super_name) if super_old_obj: res[\'status\'] = 3 res[\'info\'] = \'管理员名称已存在\' return HttpResponse(json.dumps(res)) super_obj = Superuser.objects.create(super_name=super_name, super_pwd=super_pwd) if super_obj: check = request.POST.getlist(\'check[]\') super_obj.role.clear() for i in check: super_obj.role.add(i) res[\'status\'] = 0 res[\'info\'] = \'增加成功\' else: res[\'status\'] = 1 res[\'info\'] = \'添加失败\' return HttpResponse(json.dumps(res)) else: res[\'status\'] = 2 res[\'info\'] = \'请填写完整信息\' return HttpResponse(json.dumps(res)) return render(request,\'article/super_add.html\',locals())
页面的一些效果
给其中的管理员设置权限后，登录结果
done。