CREATE TABLE IF NOT EXISTS `admin_role` (

`id` int(10) unsigned NOT NULL auto_increment,

`name` varchar(255) NOT NULL,

`update_time` int(10) unsigned NOT NULL default '',

`status` tinyint(1) unsigned NOT NULL default '',

PRIMARY KEY (`id`),

KEY `name` (`name`)

) ENGINE=MyISAM DEFAULT CHARSET=utf8;

CREATE TABLE IF NOT EXISTS `admin_role_child` (

`role_id` int(10) unsigned NOT NULL,

`item_id` int(10) unsigned NOT NULL,

KEY `item_id` (`item_id`),

KEY `role_id` (`role_id`)

) ENGINE=MyISAM DEFAULT CHARSET=utf8;

CREATE TABLE IF NOT EXISTS `admin_role_item` (

`id` int(10) unsigned NOT NULL auto_increment,

`name` varchar(255) NOT NULL,

`parent_id` int(10) unsigned NOT NULL,

`description` text,

`update_time` int(10) unsigned NOT NULL default '',

PRIMARY KEY (`id`),

KEY `name` (`name`)

) ENGINE=MyISAM DEFAULT CHARSET=utf8 ;

* @param array $itemName 需要验证权限的controller id and action id

* @param mixed $userId 需要验证权限的user id

* @param array $params 验证权限附带的参数

* @return boolean 验证结果

*/

public function checkAccess($itemName, $userId, $params=array ( ))

{

$criteria = new CDbCriteria(array('select'=>'is_supper', 'condition'=>'id = :userId', 'params'=>array(':userId'=>$userId)));

$user = Admin::model()->find($criteria);

if ($user->is_supper == 1) return true;

// 获取controller and action

$itemName = explode('/', strtolower($itemName));

$controller = $itemName[0];

$action = $itemName[1];

// 获取会员角色组

$role = AdminRole::model()->getByUser($userId);

Dumper::dump($role->items);Yii::app()->end();

if ($role !== null) foreach ($role->items as $item)

{

// 获取会员角色组权限

$item = explode('/', strtolower($item->name));

// 如果拥有当前控制器权限

if ($item[0] === $controller)

{

// 如果拥有所有权限

if ($item[1] === '*') return true;

// 如果拥有指定权限

else if ($item[1] === $action) return true;

}

}

return false;

}