假設已經存在函數 get_permissions能夠獲取當前用戶的權限列表

題意:
假設已經存在函數 get_permissions能夠獲取當前用戶的權限列表, 設計一個權限管理類,既能夠做爲裝飾器,對一個函數受權,也能夠做爲上下文管理,對一段代碼受權
例如ide

permissions = get_permissions()

if 'admin' in permissions:

    ## do somthings

else:

   raise Exception('Permissions denied')

分析:
權限檢查的通常都是用裝飾器的方法實現
demo:函數

def get_permissions():
    return "root" 

class Requrie:
    def __init__(self,permissions):
        self.permissions = permissions

    def check(self):
         if len(set(self.permissions).intersection(get_permissions())) <= 0:
                raise Exception('Permissions denied')

    def __call__(self,fn):
        @wraps(fn)
        def wrap(*args, **kwargs):
            self.check()
            return fn(*args, **kwargs)
        return wrap
    def __enter__(self):
        self.check()

    def __exit__(self, *args, **kwargs):
        pass

    def __get__(self, instance, cls): # 類做爲裝飾器,必定要這樣用
        type.MethodType(self, instance)

@Requrie({"admin", 'root'})
def reboot():
    pass 

def kill():
    print("i will kill something")
    with  Requrie("root"):
        print('kill')
相關文章
相關標籤/搜索