权限设计3

资源定义

{
  "menu-home": "首页",
  "menu-cluster": "集群管理",

  "home-btn_add": "首页-添加按钮",
  "home-btn_delete": "首页-删除按钮",

  "cluster-create_btn": "创建集群",
  "cluster-delete_btn": "删除集群"

...
  # 格式
  # menu-xxx         → 菜单
  # xxx-btn_xxx      → 页面按钮
  # xxx-tab_xxx      → tab
  # xxx-field_xxx    → 字段
}

权限分配结构(核心)

域名(host)

{
  "admin.example.com":
  {
    "menu-home": ""
  }
}
用户组(group)
用户(user)

{
“host”: {
“admin.example.com”: {
“allow”: [“menu-home”, “menu-cluster”],
“deny”: []
}
},

"group": {
  "dev": {
    "allow": [
      "menu-home",
      "home-add_btn",
      "cluster-create_btn"
    ],
    "deny": [
      "cluster-delete_btn"
    ]
  }
},

"user": {
  "lance": {
    "allow": ["home-delete_btn"],
    "deny": []
  }
}

}

`