在哪里/如何设置一个类来控制用户可以做什么（特权）？

I am using a class that performs the right query based on $_POST['action'].. Example:I am using a class that performs the right quer