js 创建access表

// 定义一个ACL对象
const acl = {
  users: {
    'user1': ['read', 'write'],
    'user2': ['read']
  },
  groups: {
    'admin': ['read', 'write', 'delete'],
    'guest': ['read']
  }
};

// 检查用户是否有权限
function checkPermission(user, permission) {
  if (acl.users[user] && acl.users[user].includes(permission)) {
    return true;
  }
  for (let group in acl.groups) {
    if (acl.groups[group].includes(permission)) {
      // 这里假设用户属于某个组，实际应用中需要查询用户所属组
      return true;
    }
  }
  return false;
}

// 使用示例
console.log(checkPermission('user1', 'write')); // 输出: true
console.log(checkPermission('user2', 'delete')); // 输出: false

const express = require('express');
const app = express();

const acl = {
  users: {
    'user1': ['read', 'write'],
    'user2': ['read']
  },
  groups: {
    'admin': ['read', 'write', 'delete'],
    'guest': ['read']
  }
};

app.use(express.json());

function checkPermission(user, permission) {
  if (acl.users[user] && acl.users[user].includes(permission)) {
    return true;
  }
  for (let group in acl.groups) {
    if (acl.groups[group].includes(permission)) {
      // 这里假设用户属于某个组，实际应用中需要查询用户所属组
      return true;
    }
  }
  return false;
}

app.get('/resource', (req, res) => {
  const user = req.headers['x-user']; // 假设用户信息通过请求头传递
  if (checkPermission(user, 'read')) {
    res.send('Access granted');
  } else {
    res.status(403).send('Access denied');
  }
});

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});