dms-api/app/v1/middleware/FilterPermission.php

<?php
namespace app\v1\middleware;

use plugin\saiadmin\app\cache\UserInfoCache;
use support\think\Db;
use Webman\Http\Request;
use Webman\Http\Response;
use Webman\MiddlewareInterface;

/**
 * 权限检查中间件
 */
class FilterPermission implements MiddlewareInterface
{
    public function process(Request $request, callable $handler) : Response
    {
        // 根据用户id获取用户权限
        $token = getCurrentInfo();
        // 用户权限缓存
        $userAuthCache = new UserInfoCache($token['id']);
        $user_info = $userAuthCache->getUserInfo();
        $currentUserRoleList = array_column($user_info['roleList'], 'id');

        // $user_info = $this->systemUserLogic->read($token['id']);

        // 获取游戏数据权限
        if(in_array(1,$currentUserRoleList)){
            $authGameList = '';
        }else{
            // 根据部门的游戏权限
            $result = Db::connect('db_system')->table('sa_system_user')->field('dept_id')->where('id', $user_info['id'])->find();
            $departmentId = $result['dept_id'] ?? 0;
            $departmentInfo = Db::connect('db_system')->table('sa_system_dept')->where('id',$departmentId)->find();
            $departmentGameList = $departmentInfo['game_list'] ?? '';
            $authGameList = $departmentGameList;
            if($departmentGameList=='*'){
                $authGameList = '';
            }
            
        }

        // 获取游戏自然量数据权限
        if(in_array(1,$currentUserRoleList)){
            $auth_normal_game_list = '*';
        }else{
            $auth_normal_game_list = $user_info['normal_game_list'] ?? '-1';
        }

        // 获取广告投放数据权限
        if(in_array(1,$currentUserRoleList)){
            $auth_ad_permission = 1;
        }else{
            $auth_ad_permission = $user_info['ad_permission'];
        }

        // 追加参数逻辑
        $extraParams = [
            'auth_normal_game_list' => $auth_normal_game_list,
            'auth_game_list' => $authGameList,
            'auth_ad_permission' =>$auth_ad_permission,
        ];
       
        // 合并并设置回 request
        $origin_header = $request->header();
        $request->setHeader(array_merge($origin_header, $extraParams));

        return $handler($request);
    }
}