后台权限控制

application/index/extend/Basic.php

@@ -63,6 +63,8 @@ class Basic extends Controller
             $this->userVerify();
         }
 
+        $this->userAuth($requestPath);
+
 
         $this->userAuth($requestPath);
     }
@@ -83,12 +85,34 @@ class Basic extends Controller
            foreach ($session as $v){
     }
 
-    public function  userAuth(){
-         $request=  \think\Request::instance();
-         $r= $request->controller();
-         $route= $request->module();
-         $name= $request->action();
-         $url=$route."/".$name;
+    /**
+     * 权限判定
+     * @param $requestPath
+     * @return Response
+     */
+    public function  userAuth($requestPath){
+       $session= Session::get("userinfo.nav");
+
+       $r=0;
+       //判断当前控制器用户是否拥有进入权限
+       foreach ($session as $v){
+           //不区分大小写
+           if(strcasecmp(trim($v['name']),$requestPath)==0){
+             $r=$v;
+
+           }
+       }
+       if($r=='0'){
+           if($this->request->isAjax()){
+            return  $this->response('300','没有权限');
+           }else{
+              // $this->error('没有当前页面权限');
+           }
+       }else{
+           Session::set("userRule",$r);
+       }
+//print_r($r);
+
 
     }