权限位掩码应如何与view / edit / add / remove权限一起使用。 如何使用它？

Question

User can view/edit/add/remove objects (categories, users, items etc.). What is the best practice to store (in MySQL), manage and check if user have such permissions.

Acl class will control if user allowed to execute controller's method or not.

Answer 1

Are you sure you want to go with bitmasks?

If you have many roles your bitmask number can get very high, and a query to search who has permission X would be bad performance wise.

Personally, I like to store such data in a two column table (UserId, PermissionId), this way it's both scalable and easy to maintain. To check who has a permission or which permissions has a user, you only need a SELECT or a JOIN.