rbac基本完成

applications/views/admin/power.py

@@ -2,19 +2,19 @@ from flask import Blueprint, render_template, request, jsonify
 from flask_login import login_required
 from applications.service.admin.power import get_power_dict, select_parent, save_power, remove_power, get_power_by_id, \
     update_power
-
+from applications.service.route_auth import authorize_and_log
 
 admin_power = Blueprint('adminPower', __name__, url_prefix='/admin/power')
 
 
 @admin_power.route('/')
-@login_required
+@authorize_and_log("admin:power:main")
 def index():
     return render_template('admin/power/main.html')
 
 
 @admin_power.route('/data')
-@login_required
+@authorize_and_log("admin:power:main")
 def data():
     power_data = get_power_dict()
     res = {
@@ -24,12 +24,13 @@ def data():
 
 
 @admin_power.route('/add')
-@login_required
+@authorize_and_log("admin:power:add")
 def add():
     return render_template('admin/power/add.html')
 
 
 @admin_power.route('/selectParent')
+@authorize_and_log("admin:power:main")
 def selectParent():
     power_data = select_parent()
     res = {
@@ -40,14 +41,18 @@ def selectParent():
     return jsonify(res)
 
 
+# 增加
 @admin_power.route('/save', methods=['POST'])
+@authorize_and_log("admin:power:add")
 def save():
     req = request.json
     save_power(req)
     return jsonify(msg="成功", success=True)
 
 
+# 权限删除
 @admin_power.route('/remove/<int:id>', methods=['DELETE'])
+@authorize_and_log("admin:power:remove")
 def remove(id):
     r = remove_power(id)
     if r:
@@ -58,6 +63,7 @@ def remove(id):
 
 # 权限编辑
 @admin_power.route('/edit/<int:id>', methods=['GET', 'POST'])
+@authorize_and_log("admin:power:edit")
 def edit(id):
     power = get_power_by_id(id)
     icon = str(power.icon).split()
@@ -70,6 +76,7 @@ def edit(id):
 
 # 权限更新
 @admin_power.route('/update', methods=['PUT'])
+@authorize_and_log("admin:power:edit")
 def update():
     res = update_power(request.json)
     if not res: