[TOC] ## 概述 ``` package main import ( "fmt" "github.com/casbin/casbin/v2" "github.com/casbin/casbin/v2/model" fileadapter "github.com/casbin/casbin/v2/persist/file-adapter" _ "github.com/go-sql-driver/mysql" "log" ) func main() { a,_:=model.NewModelFromString(` [request_definition] r = sub, obj, act [policy_definition] p = sub, obj, act [role_definition] g = _, _ [policy_effect] e = some(where (p.eft == allow)) [matchers] m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act `) b:=fileadapter.NewAdapter("D:\\workspace\\antbiz\\test\\basic_policy.csv") e, err := casbin.NewEnforcer(a,b) if err != nil { log.Fatalf("error: enforcer: %s", err) } sub := "alice" // 想要訪問資源的用戶。 obj := "data1" // 將被訪問的資源。 act := "read" // 用戶對資源執行的操作。 ok, err := e.Enforce(sub, obj, act) if err != nil { // 處理err } if ok == true { fmt.Printf("%+v\n", ok) } else { // 拒絕請求，拋出異常 fmt.Printf("%+v\n", "not allow") } roles,err := e.GetRolesForUser("alice") if err != nil { fmt.Printf("%+v\n", err) } fmt.Printf("%+v\n", roles) // 您可以使用BatchEnforce()來批量執行一些請求 // 這個方法返回布爾切片，此切片的索引對應于二維數組的行索引。 // 例如 results[0] 是 {"alice", "data1", "read"} 的結果 //results, err := e.BatchEnforce([][]interface{}{{"alice", "data1", "read"}, {"bob", "data2", "write"}, {"jack", "data3", "read"}}) } ```