Method checkPermissionList

pkg/security/access_control.go:815–833

checkPermissionList 检查权限列表

(permissionIDs []string, resource, action string, context map[string]any)

// checkPermissionList 检查权限列表
func (ac *AccessController) checkPermissionList(permissionIDs []string, resource, action string, context map[string]any) bool {
	for _, permID := range permissionIDs {
		permission, exists := ac.permissions[permID]
		if !exists || !permission.Enabled {
			continue
		}

		// 检查资源和操作匹配
		if (permission.Resource == "*" || permission.Resource == resource) &&
			(permission.Action == "*" || permission.Action == action) {
			// 检查权限条件
			if ac.checkPermissionConditions(permission.Conditions, context) {
				return true
			}
		}
	}

	return false
}

// checkPermissionConditions 检查权限条件
func (ac *AccessController) checkPermissionConditions(conditions []PermissionCondition, context map[string]any) bool {