Implement different user level views in php [dupli

2019-04-12 08:29发布

问题:

Possible Duplicate:
Implementing User Authorization in PHP and Javascript

I have a basic accounting system with the following users and user levels,

(User Name, Password, User Level)

A, 123, Admin

B, 456, Accountant

C, 789, Staff Member

D, 999, Manager

I need to provide them with different selected information based on their user level. For example,

-only admins have privileges of creation and deletion of user accounts

-staff only has privileges to view sales and purchasing information

-only accountants have privileges to record accounting entries

-only managers and accountants have privileges to view management reports

How can i implement this using PHP(OOP)?

Thank you.

回答1:

There are many RBAC (role based access control) implementation already. I suggest using one of those rather than creating your own:

  • http://phpmaster.com/role-based-access-control-in-php/
  • http://www.tonymarston.net/php-mysql/role-based-access-control.html
  • Role Based Access Control