MongoDB + Node JS + 基于角色的访问控制 (RBAC)

MongoDB是一款流行的NoSQL数据库，而Node.js是一种运行JavaScript的开发平台。结合这两个技术，我们可以构建功能强大的应用程序。本文将介绍如何在MongoDB和Node.js中实现基于角色的访问控制（RBAC）。

{
  "_id": "admin",
  "permissions": [
    "read",
    "write",
    "delete"
  ]
}

{
  "_id": "user1",
  "name": "John Doe",
  "role": "admin"
}

javascript
const MongoClient = require('mongodb').MongoClient;
// Connection URL
const url = 'mongodb://localhost:27017';
// Database Name
const dbName = 'mydb';
// Connect to the server
MongoClient.connect(url, function(err, client) {
  console.log("Connected successfully to server");
  const db = client.db(dbName);
  // Perform operations here
  client.close();
});

javascript
// Create a new role
const createRole = function(roleName, permissions) {
  const role = {
    _id: roleName,
    permissions: permissions
  };
  db.collection('roles').insertOne(role, function(err, result) {
    console.log("Role created");
  });
};
// Check user permission
const checkPermission = function(userId, permission) {
  db.collection('users').findOne({_id: userId}, function(err, user) {
    if (user) {
      db.collection('roles').findOne({_id: user.role}, function(err, role) {
        if (role && role.permissions.includes(permission)) {
          console.log("User has permission");
        } else {
          console.log("User does not have permission");
        }
      });
    } else {
      console.log("User not found");
    }
  });
};
// Example usage
createRole("admin", ["read", "write", "delete"]);
checkPermission("user1", "read");