Method getUserPermissions

pkg/security/access_control.go:755–794

getUserPermissions 获取用户的所有权限

(userID string)

// getUserPermissions 获取用户的所有权限
func (ac *AccessController) getUserPermissions(userID string) []string {
	// 检查缓存
	if permissions, exists := ac.userPermissions[userID]; exists {
		var permissionIDs []string
		for permID := range permissions {
			permissionIDs = append(permissionIDs, permID)
		}
		return permissionIDs
	}

	permissionSet := make(map[string]bool)
	userRoles := ac.userRoles[userID]

	// 获取角色的权限
	for _, roleID := range userRoles {
		rolePerms := ac.rolePermissions[roleID]
		for _, permID := range rolePerms {
			permissionSet[permID] = true
		}

		// 递归获取父角色权限
		role, exists := ac.roles[roleID]
		if exists {
			parentPermissions := ac.getParentRolePermissions(role)
			for _, permID := range parentPermissions {
				permissionSet[permID] = true
			}
		}
	}

	// 缓存结果
	ac.userPermissions[userID] = permissionSet

	var permissionIDs []string
	for permID := range permissionSet {
		permissionIDs = append(permissionIDs, permID)
	}

	return permissionIDs
}

// getParentRolePermissions 获取父角色权限
func (ac *AccessController) getParentRolePermissions(role *Role) []string {