user = User("john") user.addrole(userrole)
查抄用户是否具有某个权限
def has_permission(user, resource, action): for role in user.roles: for permission in role.permissions: if permission.resource == resource and permission.action == action: return True return False
测试