【进阶实战】后台权限最小化：运营操作的角色分离封装

local ROLES = {
    service = { "query_player", "query_order" },
    operator = { "send_reward", "query_player" },
    finance = { "query_order", "query_charge" },
}
local function hasPerm(user, op)
    local role = userRole[user]
    if role == nil then
        return false
    end
    local perms = ROLES[role]
    for _, p in ipairs(perms) do
        if p == op then
            return true
        end
    end
    return false
end

local function denyAndAlert(user, op)
    print("[越权告警] " .. user .. " 尝试未授权操作：" .. op)
    setsysvarex("PermAlert_" .. os.date("%Y%m%d"),
        (getsysvar("PermAlert_" .. os.date("%Y%m%d")) or "") ..
        user .. "|" .. op .. "|", 1)
end