Go语言：跨平台检测用户管理员权限的策略与实践

package main

import (
    "fmt"
    "os/user"
    "runtime"
    "syscall"
    "unsafe"

    "golang.org/x/sys/windows"
)

// IsUserAdministrator checks if the current user is a Windows administrator.
func IsUserAdministrator() (bool, error) {
    if runtime.GOOS != "windows" {
        return false, fmt.Errorf("this function is only for Windows")
    }

    var sid *windows.SID
    // S-1-5-32-544 is the SID for the Builtin Administrators group
    err := windows.ConvertStringSidToSid("S-1-5-32-544", &sid)
    if err != nil {
        return false, fmt.Errorf("failed to convert SID string: %w", err)
    }
    defer windows.FreeSid(sid)

    var isMember bool
    err = windows.CheckTokenMembership(0, sid, &isMember)
    if err != nil {
        return false, fmt.Errorf("failed to check token membership: %w", err)
    }

    return isMember, nil
}

func main() {
    if runtime.GOOS == "windows" {
        isAdmin, err := IsUserAdministrator()
        if err != nil {
            fmt.Printf("Error checking administrator status: %v\n", err)
            return
        }
        if isAdmin {
            fmt.Println("当前用户是管理员。")
        } else {
            fmt.Println("当前用户不是管理员。")
        }
    } else {
        // For non-Windows systems, provide a basic check
        currentUser, err := user.Current()
        if err != nil {
            fmt.Printf("Error getting current user: %v\n", err)
            return
        }
        if currentUser.Uid == "0" { // Unix-like systems: UID 0 is root
            fmt.Println("当前用户是root（管理员）。")
        } else {
            fmt.Println("当前用户不是root。")
            // Further checks for group membership (e.g., 'sudo' group) can be added here
            // groupIDs, _ := currentUser.GroupIds()
            // fmt.Println("Group IDs:", groupIDs)
        }
    }
}

// ... (main function from previous example)
// For non-Windows systems in main() function:
        currentUser, err := user.Current()
        if err != nil {
            fmt.Printf("Error getting current user: %v\n", err)
            return
        }
        if currentUser.Uid == "0" { // Unix-like systems: UID 0 is root
            fmt.Println("当前用户是root（管理员）。")
        } else {
            fmt.Println("当前用户不是root。")
            // 进一步检查是否属于sudo或wheel组
            groupIDs, err := currentUser.GroupIds()
            if err != nil {
                fmt.Printf("Error getting group IDs: %v\n", err)
                return
            }
            isAdminGroupMember := false
            for _, gid := range groupIDs {
                group, err := user.LookupGroupId(gid)
                if err != nil {
                    // 忽略无法查找的组
                    continue
                }
                if group.Name == "sudo" || group.Name == "wheel" || group.Name == "admin" {
                    isAdminGroupMember = true
                    break
                }
            }
            if isAdminGroupMember {
                fmt.Println("当前用户是管理员组的成员。")
            } else {
                fmt.Println("当前用户不是管理员组的成员。")
            }
        }
// ...