From 4daf0a15ba379cf9c3815da970854b323f43ee8f Mon Sep 17 00:00:00 2001
From: ouqiang <qingqianludao@gmail.com>
Date: Sun, 1 Oct 2017 22:53:22 +0800
Subject: [PATCH] =?UTF-8?q?feat($permission):=20=E5=A2=9E=E5=8A=A0?=
 =?UTF-8?q?=E8=B4=A6=E6=88=B7=E6=9D=83=E9=99=90=E6=8E=A7=E5=88=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Close #12
---
 gocron-node.go               |  2 +-
 routers/routers.go           | 29 ++++++++++++++++++++++
 templates/common/header.html |  4 +--
 templates/host/index.html    |  8 +++++-
 templates/task/index.html    | 48 ++++++++++++++++++++++--------------
 templates/task/log.html      |  2 ++
 6 files changed, 70 insertions(+), 23 deletions(-)

diff --git a/gocron-node.go b/gocron-node.go
index c751f0d..c53c9f0 100644
--- a/gocron-node.go
+++ b/gocron-node.go
@@ -14,7 +14,7 @@ import (
 	"strings"
 )
 
-const AppVersion = "1.2.2"
+const AppVersion = "1.3"
 
 func main() {
 	var serverAddr string
diff --git a/routers/routers.go b/routers/routers.go
index a27eff9..3bfa014 100644
--- a/routers/routers.go
+++ b/routers/routers.go
@@ -171,6 +171,7 @@ func RegisterMiddleware(m *macaron.Macaron) {
 		if app.Installed {
 			ipAuth(ctx)
 			userAuth(ctx, sess)
+			urlAuth(ctx, sess)
 			setShareData(ctx, sess)
 		}
 	})
@@ -224,6 +225,33 @@ func userAuth(ctx *macaron.Context, sess session.Store) {
 	}
 }
 
+// URL权限验证
+func urlAuth(ctx *macaron.Context, sess session.Store)  {
+	if user.IsAdmin(sess) {
+		return
+	}
+	// 普通用户允许访问的URL地址
+	allowPaths := []string{
+		"",
+		"/task",
+		"/task/log",
+		"/host",
+		"/user/login",
+		"/user/logout",
+		"/user/editMyPassword",
+	}
+	uri := strings.TrimSpace(ctx.Req.URL.Path)
+	uri = strings.TrimRight(uri, "/")
+	for _, path := range allowPaths {
+		if path == uri {
+			return
+		}
+	}
+
+	ctx.Status(403)
+
+}
+
 /** 设置共享数据 **/
 func setShareData(ctx *macaron.Context, sess session.Store) {
 	ctx.Data["URI"] = ctx.Req.URL.Path
@@ -239,6 +267,7 @@ func setShareData(ctx *macaron.Context, sess session.Store) {
 	}
 	ctx.Data["LoginUsername"] = user.Username(sess)
 	ctx.Data["LoginUid"] = user.Uid(sess)
+	ctx.Data["IsAdmin"] = user.IsAdmin(sess)
 	ctx.Data["AppName"] = app.Setting.AppName
 }
 
diff --git a/templates/common/header.html b/templates/common/header.html
index d82f842..af6e849 100644
--- a/templates/common/header.html
+++ b/templates/common/header.html
@@ -62,9 +62,9 @@
             <div class="right menu">
                 <a class="item {{{if or (eq .Controller "task") (eq .Controller "delaytask")}}}active{{{end}}}" href="/task"><i class="tasks icon"></i>任务</a>
                 <a class="item {{{if eq .Controller "host"}}}active{{{end}}}" href="/host"><i class="linux icon"></i>任务节点</a>
+                {{{if .IsAdmin}}}
                  <a class="item {{{if eq .Controller "user"}}}active{{{end}}}" href="/user"><i class="user icon"></i>用户管理</a>
-                {{{if gt .LoginUid 0}}}
-                <a class="item {{{if eq .Controller "manage"}}}active{{{end}}}" href="/manage/slack/edit"><i class="settings icon"></i>管理</a>
+                <a class="item {{{if eq .Controller "manage"}}}active{{{end}}}" href="/manage/slack/edit"><i class="settings icon"></i>系统管理</a>
                 {{{end}}}
             </div>
         </div>
diff --git a/templates/host/index.html b/templates/host/index.html
index 6505ac7..5056f77 100644
--- a/templates/host/index.html
+++ b/templates/host/index.html
@@ -4,7 +4,8 @@
    {{{ template "host/menu" . }}}
 
     <div class="twelve wide column">
-        <div class="pageHeader">
+        {{{if .IsAdmin}}}
+            <div class="pageHeader">
             <div class="segment">
                 <h3 class="ui dividing header">
                     <a href="/host/create">
@@ -16,6 +17,7 @@
                 </h3>
             </div>
         </div>
+        {{{end}}}
         <form class="ui form">
             <div class="three fields">
                 <div class="field">
@@ -49,11 +51,15 @@
                 <td>{{{.Port}}}</td>
                 <td>{{{.Remark}}}</td>
                 <td class="operation">
+                    {{{if $.IsAdmin}}}
                     <a class="ui purple button"  href="/host/edit/{{{.Id}}}">编辑</a>
                     <button class="ui positive button" onclick="util.removeConfirm('/host/remove/{{{.Id}}}')">删除</button><br>
+                    {{{end}}}
                     <div style="margin-top: 5px;">
                         <a class="ui twitter button" href="/task?host_id={{{.Id}}}">查看任务</a>
+                        {{{if $.IsAdmin}}}
                         <button class="ui blue button" @click="ping({{{.Id}}})">连接测试</button>
+                        {{{end}}}
                     </div>
                 </td>
             </tr>
diff --git a/templates/task/index.html b/templates/task/index.html
index 949fe4a..46bbe7b 100644
--- a/templates/task/index.html
+++ b/templates/task/index.html
@@ -2,7 +2,8 @@
 <div class="ui grid">
     {{{template "task/menu" .}}}
     <div class="twelve wide column">
-        <div class="pageHeader">
+        {{{if .IsAdmin}}}
+            <div class="pageHeader">
             <div class="segment">
                 <h3 class="ui dividing header">
                     <a href="/task/create">
@@ -14,6 +15,7 @@
                 </h3>
             </div>
         </div>
+        {{{end}}}
         <form class="ui form">
             <div class="six fields search">
                 <div class="one wide field">
@@ -54,21 +56,25 @@
                 </div>
             </div>
         </form>
-        <div class="field">
-            <select id="batch-operation">
-                <option value="0">批量操作</option>
-                <option value="1">激活</option>
-                <option value="2">停止</option>
-                <option value="3">删除</option>
-            </select>
-        </div>
+        {{{if .IsAdmin}}}
+            <div class="field">
+                <select id="batch-operation">
+                    <option value="0">批量操作</option>
+                    <option value="1">激活</option>
+                    <option value="2">停止</option>
+                    <option value="3">删除</option>
+                </select>
+            </div>
+        {{{end}}}
         <br>
         <table class="ui celled table task-list">
             <thead>
             <tr>
-                <th>
-                    <input type="checkbox" onclick="checkAll(this)" style="width:25px;height: 25px;">
-                </th>
+                {{{if .IsAdmin}}}
+                    <th>
+                        <input type="checkbox" onclick="checkAll(this)" style="width:25px;height: 25px;">
+                    </th>
+                {{{end}}}
                 <th>任务ID</th>
                 <th>任务名称</th>
                 <th>任务类型</th>
@@ -86,12 +92,14 @@
             <tbody>
                 {{{range $i, $v := .Tasks}}}
                     <tr>
-                        <td>
-                            <input type="checkbox"
-                                   class="sub-check"
-                                   data-id="{{{.Id}}}"
-                                   style="width:25px;height: 25px;">
-                        </td>
+                        {{{if $.IsAdmin}}}
+                            <td>
+                                <input type="checkbox"
+                                       class="sub-check"
+                                       data-id="{{{.Id}}}"
+                                       style="width:25px;height: 25px;">
+                            </td>
+                        {{{end}}}
                         <td>{{{.Id}}}</td>
                         <td>{{{.Name}}}</td>
                         <td>{{{if eq .Level 1}}}主任务{{{else}}}子任务{{{end}}}</td>
@@ -113,7 +121,7 @@
                         </td>
                         <td>
                             <div class="ui buttons operation">
-
+                                {{{if $.IsAdmin}}}
                                 <a href="/task/edit/{{{.Id}}}" ><i class="edit big  icon" title="编辑"></i></a>&nbsp;&nbsp;&nbsp;&nbsp;
                                 {{{if eq .Level 1}}}
                                     {{{if eq .Status 1}}}
@@ -124,6 +132,8 @@
                                 {{{end}}}
                                 <a href="javascript:void(0);"  @click="remove({{{.Id}}})"><i class="remove big  icon" title="删除"></i></a>
                                 <a href="javascript:void(0);"  @click="run({{{.Id}}})"><i class="rocket big icon" title="手动执行"></i></a>&nbsp;&nbsp;
+                                {{{end}}}
+
                                 <a href="/task/log?task_id={{{.Id}}}"><i class="bar chart icon big" title="查看日志"></i></a>
                             </div>
                         </td>
diff --git a/templates/task/log.html b/templates/task/log.html
index 9f8a09c..d9f7fbf 100644
--- a/templates/task/log.html
+++ b/templates/task/log.html
@@ -13,6 +13,7 @@
    {{{ template "task/menu" . }}}
 
     <div class="twelve wide column">
+        {{{if .IsAdmin}}}
         <div class="pageHeader">
             <div class="segment">
                 <h3 class="ui dividing header">
@@ -22,6 +23,7 @@
                 </h3>
             </div>
         </div>
+        {{{end}}}
         <form class="ui form">
             <div class="six fields search">
                 <div class="field">