django 通过url实现简单的权限控制的例子

class level(models.Model):  l_name = models.CharField(max_length=50,verbose_name="等级名称")  l_permission = models.OneToOneField("permission")  def __str__(self):    return self.l_name  class userinfo(models.Model):  u_name = models.CharField(max_length=50,verbose_name="用户名称")  u_user = models.OneToOneField(User)  u_level = models.ForeignKey(level,related_name="lev")   def __str__(self):    return self.u_name  class permission(models.Model):  p_name = models.CharField(max_length=50,verbose_name="权限名称")  p_menu = models.ManyToManyField("menu")   def __str__(self):    return self.p_name class menu(models.Model):  m_name = models.CharField(max_length=50,verbose_name="菜单名称")  m_url = models.CharField(max_length=50,verbose_name="菜单地址",blank=True,null=True)  def __str__(self):    return self.m_name class nickname(models.Model):  n_nickname = models.CharField(max_length=50,verbose_name="昵称",blank=True,null=True)  n_user = models.ForeignKey(userinfo,blank=True,null=True,related_name="nick")   def __str__(self):    return self.n_nickname

URL_WHITE_LIST = ['index', 'login', 'logout']

def url_check(fun):  def check(request,*args,**kwargs):    if request.session.get("p_l",None):      require_list = pickle.loads(request.session.get("p_l"))      request_url = request.path.replace("/","")      ua = request.META.get('HTTP_USER_AGENT',None)      if request_url in require_list or request_url in IP_WHITE_LIST:        return fun(request,*args,**kwargs)      else:        error_msg = "没有权限!"        menu_ = pickle.loads(request.session.get("p_l"))        return render(request,"index.html",{"error_msg":error_msg,"menu":menu_})    else:      return HttpResponseRedirect(reverse("login"))  return check

@url_checkdef menu(request,menuname):  return HttpResponse("<h1>%s</h1>"%menuname)