SSM集成SpringSecurity做权限控制

忘是亡心i 2023-06-23 12:52 32阅读 0赞

## 1.数据库设计（注意主外键关系） ##

①User表的设计：  
![在这里插入图片描述][20191219004623798.png] ②Role表设计：  
![在这里插入图片描述][20191219004732150.png]  
③中间表设计：  
![在这里插入图片描述][20191219004832438.png]

## 项目结构 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70]

## 父工程pom文件配置如下 ##

<?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
        <modelVersion>4.0.0</modelVersion>
    
        <groupId>cn.itcast</groupId>
        <artifactId>SpringMVC_SpringSecurity</artifactId>
        <version>1.0-SNAPSHOT</version>
        <modules>
            <module>Spring_Model</module>
            <module>Spring_Service</module>
            <module>Spring_Dao</module>
            <module>Spring_Web</module>
    
        </modules>
        <packaging>pom</packaging>
        <properties>
            <spring.version>5.0.2.RELEASE</spring.version>
            <slf4j.version>1.6.6</slf4j.version>
            <log4j.version>1.2.12</log4j.version>
            <oracle.version>14</oracle.version>
            <mybatis.version>3.4.5</mybatis.version>
            <spring.security.version>5.0.1.RELEASE</spring.security.version>
        </properties>
        <dependencies>
            <dependency>
                <groupId>org.aspectj</groupId>
                <artifactId>aspectjweaver</artifactId>
                <version>1.6.8</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-jdbc</artifactId>
                <version>${ spring.version}</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-aop</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-context</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-context-support</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-web</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-orm</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-beans</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-core</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-test</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-webmvc</artifactId>
                <version>${ spring.version}</version>
    
            </dependency>
            <dependency>
                <groupId>org.springframework</groupId>
                <artifactId>spring-tx</artifactId>
                <version>${ spring.version}</version>
            </dependency>
            <dependency>
                <groupId>junit</groupId>
                <artifactId>junit</artifactId>
                <version>4.12</version>
                <scope>test</scope>
            </dependency>
    
            <dependency>
                <groupId>javax.servlet</groupId>
                <artifactId>javax.servlet-api</artifactId>
                <version>3.1.0</version>
                <scope>provided</scope>
            </dependency>
            <dependency>
                <groupId>javax.servlet.jsp</groupId>
                <artifactId>jsp-api</artifactId>
                <version>2.0</version>
                <scope>provided</scope>
            </dependency>
            <dependency>
                <groupId>jstl</groupId>
                <artifactId>jstl</artifactId>
                <version>1.2</version>
            </dependency>        
            <dependency>
                <groupId>log4j</groupId>
                <artifactId>log4j</artifactId>
                <version>${ log4j.version}</version>
            </dependency>
            <dependency>
                <groupId>org.slf4j</groupId>
                <artifactId>slf4j-api</artifactId>
                <version>${ slf4j.version}</version>
            </dependency>
            <dependency>
                <groupId>org.slf4j</groupId>
                <artifactId>slf4j-log4j12</artifactId>
                <version>${ slf4j.version}</version>
            </dependency>        
    
            <dependency>
                <groupId>org.mybatis</groupId>
                <artifactId>mybatis</artifactId>
                <version>${ mybatis.version}</version>
            </dependency>
            <dependency>
                <groupId>org.mybatis</groupId>
                <artifactId>mybatis-spring</artifactId>
                <version>1.3.0</version>
            </dependency>
            <dependency>
                <groupId>c3p0</groupId>
                <artifactId>c3p0</artifactId>
                <version>0.9.1.1</version>
                <type>jar</type>
                <scope>compile</scope>
            </dependency>
            
            <dependency>
                <groupId>org.springframework.security</groupId>
                <artifactId>spring-security-web</artifactId>
                <version>${ spring.security.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.security</groupId>
                <artifactId>spring-security-config</artifactId>
                <version>${ spring.security.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.security</groupId>
                <artifactId>spring-security-core</artifactId>
                <version>${ spring.security.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.security</groupId>
                <artifactId>spring-security-taglibs</artifactId>
                <version>${ spring.security.version}</version>
            </dependency>
    
            <dependency>
                <groupId>mysql</groupId>
                <artifactId>mysql-connector-java</artifactId>
                <version>5.1.6</version>
            </dependency>
    
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>druid</artifactId>
                <version>1.0.9</version>
            </dependency>
    
            <dependency>
                <groupId>javax.annotation</groupId>
                <artifactId>jsr250-api</artifactId>
                <version>1.0</version>
            </dependency>
        </dependencies>
        <build>
            <pluginManagement>
                <plugins>
                    <plugin>
                        <groupId>org.apache.tomcat.maven</groupId>
                        <artifactId>tomcat7-maven-plugin</artifactId>
                        <version>2.2</version>
                        <configuration>
                            <path>/</path>
                            <port>8080</port>
                            <update>true</update>
                            <uriEncoding>UTF-8</uriEncoding>
                        </configuration>
                    </plugin>
                    <plugin>
                        <groupId>org.apache.maven.plugins</groupId>
                        <artifactId>maven-compiler-plugin</artifactId>
                        <version>3.2</version>
                        <configuration>
                            <source>1.8</source>
                            <target>1.8</target>
                            <encoding>UTF-8</encoding>
                            <showWarnings>true</showWarnings>
                        </configuration>
                    </plugin>
                </plugins>
            </pluginManagement>
        </build>
    </project>

## 数据访问层的设计： ##

①UserMapper

import org.apache.ibatis.annotations.*;
    import org.apache.ibatis.mapping.FetchType;
    
    import java.util.List;
    
    /** * 作者：王凯 * 作成时间：2019/12/18 0018 周三 */
    public interface UserMapper { 
    
        @Select("select * from users")
        List<User> findAll();
    
        @Select("Select * from users where user_name=#{username}")
        @Results({ 
                @Result(id = true,property = "userId",column = "user_id"),
                @Result(property = "userName",column = "user_name"),
                @Result(property = "password", column = "password"),
                @Result(property = "name",column = "name"),
                @Result(property = "roleList",column = "user_id",many = @Many(select = "cn.itcast.dao.RoleMapper.findRoleByUserId",fetchType = FetchType.EAGER)),
    
        })
        User findByUserName (String username);
    
    }

②RoleMapper

import org.apache.ibatis.annotations.*;
    
    import java.util.List;
    
    /** * 作者：王凯 * 作成时间：2019/12/18 0018 周三 */
    public interface RoleMapper { 
    
    
        @Select("SELECT * FROM role WHERE role_id IN (SELECT role_id FROM user_role WHERE user_id= #{userId})")
        @Results({ 
                @Result(id = true, property = "roleId", column = "role_id"),
                @Result(property = "roleName", column = "role_name"),
                @Result(property = "roleNameZH", column = "role_name_ZH"),
        })
        List<Role> findRoleByUserId(int userId);
    
    
    }

③配置文件applicationContext-Dao.xml

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xmlns:context="http://www.springframework.org/schema/context"
           xsi:schemaLocation="http://www.springframework.org/schema/beans
    	http://www.springframework.org/schema/beans/spring-beans.xsd
    	http://www.springframework.org/schema/context
    	http://www.springframework.org/schema/context/spring-context.xsd">
    
        
      
        
        <context:property-placeholder location="classpath*:db.properties"/>
        
        <bean id="dataSource" class="com.alibaba.druid.pool.DruidDataSource">
            <property name="username" value="${jdbc.username}"/>
            <property name="password" value="${jdbc.password}"/>
            <property name="driverClassName" value="${jdbc.driver}"/>
            <property name="url" value="${jdbc.url}"/>
        </bean>
        
        <bean id="sqlSessionFactory" class="org.mybatis.spring.SqlSessionFactoryBean">
            <property name="dataSource" ref="dataSource"/>
            <property name="typeAliasesPackage" value="cn.itcast.domain"/>
            
            <property name="configLocation" value="classpath:SqlMapConfig.xml"/>
        </bean>
        
        <bean id="mapperScanner" class="org.mybatis.spring.mapper.MapperScannerConfigurer">
            <property name="basePackage" value="cn.itcast.dao"/>
        </bean>
    </beans>

④配置文件db.properties

jdbc.driver=com.mysql.jdbc.Driver
    jdbc.url=jdbc:mysql://localhost:3306/spring
    jdbc.username=root
    jdbc.password=123465

⑤配置文件SqlMapConfig.xml（可以什么都没有）

<?xml version="1.0" encoding="UTF-8" ?>
    <!DOCTYPE configuration PUBLIC "-//mybatis.org//DTD Config 3.0//EN" "http://mybatis.org/dtd/mybatis-3-config.dtd">
    <configuration>
    
    </configuration>

⑥pom文件

## Model的设计比较简单，满足ORM关系即可 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70 1]

## 业务逻辑层设计 ##

①UserService 设计

import org.springframework.security.core.userdetails.UserDetailsService;
    
    import java.util.List;
    
    /** * 作者：王凯 * 作成时间：2019/12/18 0018 周三 */
    public interface UserService extends UserDetailsService { 
    
        List<User> findAll();
    
    }

②UserService实现类设计

import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.security.authentication.BadCredentialsException;
    import org.springframework.security.core.GrantedAuthority;
    import org.springframework.security.core.authority.SimpleGrantedAuthority;
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UsernameNotFoundException;
    import org.springframework.stereotype.Service;
    import org.springframework.transaction.annotation.Transactional;
    
    import java.util.ArrayList;
    import java.util.Collection;
    import java.util.List;
    
    /** * 作者：王凯 * 作成时间：2019/12/18 0018 周三 */
    @Service("userService")
    @Transactional
    public class UserServiceImpl implements UserService { 
    
    
        @Autowired
        private UserMapper userMapper;
    
        @Override
        public List<User> findAll() { 
            return userMapper.findAll();
        }
    
        @Override
        public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { 
    
            User userInfo = userMapper.findByUserName(username);
            if (userInfo != null) { 
                //处理自己的用户对象封装成UserDetails
                return new org.springframework.security.core.userdetails.User(userInfo.getUserName(), userInfo.getPassword(), getAuthority(userInfo.getRoleList()));
            }
            throw new BadCredentialsException("用户名错误");
        }
    
    
        private Collection<? extends GrantedAuthority> getAuthority(List<Role> roleList) { 
            List<SimpleGrantedAuthority> list = new ArrayList<>();
            for (Role role : roleList) { 
                list.add(new SimpleGrantedAuthority("ROLE_"+role.getRoleName()));
            }
            return list;
    
        }
    }

③applicationContext-service.xml配置

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xmlns:context="http://www.springframework.org/schema/context"
           xmlns:aop="http://www.springframework.org/schema/aop"
           xmlns:tx="http://www.springframework.org/schema/tx"
           xsi:schemaLocation="http://www.springframework.org/schema/beans
    			    http://www.springframework.org/schema/beans/spring-beans.xsd
    			    http://www.springframework.org/schema/context
    			    http://www.springframework.org/schema/context/spring-context.xsd
    			    http://www.springframework.org/schema/aop
    			    http://www.springframework.org/schema/aop/spring-aop.xsd
    			    http://www.springframework.org/schema/tx
    			    http://www.springframework.org/schema/tx/spring-tx.xsd">
        
        <context:component-scan base-package="cn.itcast.service"/>
        
        
        <import resource="classpath*:applicationContext-Dao.xml"/>
    
        <context:annotation-config/>
        
        <bean id="transactionManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
            <property name="dataSource" ref="dataSource"/>
        </bean>
        
        <tx:advice id="txAdvice" transaction-manager="transactionManager">
            <tx:attributes>
                <tx:method name="save*"/>
                <tx:method name="update*"/>
                <tx:method name="delete*"/>
                <tx:method name="find*" read-only="true"/>
                <tx:method name="*"/>
            </tx:attributes>
        </tx:advice>
        
        <aop:config>
            <aop:advisor advice-ref="txAdvice" pointcut="execution(* cn.itcast.service.impl.*.*(..))"/>
        </aop:config>
    </beans>

④pom文件设置

## Web层的设计 ##

①结构如图  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70 2]②UserController设计

package cn.itcast.controller;
    
    import cn.itcast.domain.User;
    import cn.itcast.service.UserService;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.security.web.WebAttributes;
    import org.springframework.stereotype.Controller;
    import org.springframework.ui.Model;
    import org.springframework.web.bind.annotation.RequestMapping;
    
    import javax.servlet.http.HttpServletRequest;
    import java.util.List;
    
    /** * @author 王凯 * @Description: 用户的控制类 * @date 2018/12/4 000417:57 */
    @Controller
    public class UserController { 
    
        @Autowired
        @Qualifier("userService")
        private UserService userService;
    
        /** * 查询所有用户信息 * * @param model * @return */
        @RequestMapping("/findAll.do")
        public String findAllUser(Model model) { 
            List<User> userInfoList = userService.findAll();
            model.addAttribute("userList", userInfoList);
            return "main";
        }
    
    
        @RequestMapping("/showMassage.do")
        public String showMassage(Model model,HttpServletRequest request) { 
            String message = "";
            Exception exception = (Exception) request.getSession().getAttribute(WebAttributes.AUTHENTICATION_EXCEPTION);
            if (exception != null) { 
                message = exception.getMessage();
            }
            model.addAttribute("message", message);
            return "failer";
        }
    }

②log4j.properties文件的配置

# Set root category priority to INFO and its only appender to CONSOLE.
    #log4j.rootCategory=INFO, CONSOLE            debug   info   warn error fatal
    log4j.rootCategory=debug, CONSOLE, LOGFILE, ERROR
    
    # Set the enterprise logger category to FATAL and its only appender to CONSOLE.
    log4j.logger.org.apache.axis.enterprise=FATAL, CONSOLE,ERROR
    
    # CONSOLE is set to be a ConsoleAppender using a PatternLayout.
    log4j.appender.CONSOLE=org.apache.log4j.ConsoleAppender
    log4j.appender.CONSOLE.layout=org.apache.log4j.PatternLayout
    log4j.appender.CONSOLE.layout.ConversionPattern=%d{ ISO8601} %-6r [%15.15t] %-5p %30.30c %x - %m\n
    
    # LOGFILE is set to be a File appender using a PatternLayout.
    # log4j.appender.LOGFILE=org.apache.log4j.FileAppender
    # log4j.appender.LOGFILE.File=d:\axis.log
    # log4j.appender.LOGFILE.Append=true
    # log4j.appender.LOGFILE.layout=org.apache.log4j.PatternLayout
    # log4j.appender.LOGFILE.layout.ConversionPattern=%d{ ISO8601} %-6r [%15.15t] %-5p %30.30c %x - %m\n

③messages\_zh\_CN.properties文件配置（SpringSecurity错误提示默认已有的配置文件）

AbstractAccessDecisionManager.accessDenied=不允许访问
    AbstractLdapAuthenticationProvider.emptyPassword=坏的凭证
    AbstractSecurityInterceptor.authenticationNotFound=未在SecurityContext中查找到认证对象
    AbstractUserDetailsAuthenticationProvider.badCredentials=密码错误
    AbstractUserDetailsAuthenticationProvider.credentialsExpired=用户凭证已过期
    AbstractUserDetailsAuthenticationProvider.disabled=用户已失效
    AbstractUserDetailsAuthenticationProvider.expired=用户帐号已过期
    AbstractUserDetailsAuthenticationProvider.locked=用户帐号已被锁定
    AbstractUserDetailsAuthenticationProvider.onlySupports=仅仅支持UsernamePasswordAuthenticationToken
    AccountStatusUserDetailsChecker.credentialsExpired=用户凭证已过期
    AccountStatusUserDetailsChecker.disabled=用户已失效
    AccountStatusUserDetailsChecker.expired=用户帐号已过期
    AccountStatusUserDetailsChecker.locked=用户帐号已被锁定
    AclEntryAfterInvocationProvider.noPermission=给定的Authentication对象({ 0})根本无权操控领域对象({ 1})
    AnonymousAuthenticationProvider.incorrectKey=展示的AnonymousAuthenticationToken不含有预期的key
    BindAuthenticator.badCredentials=坏的凭证
    BindAuthenticator.emptyPassword=坏的凭证
    CasAuthenticationProvider.incorrectKey=展示的CasAuthenticationToken不含有预期的key
    CasAuthenticationProvider.noServiceTicket=未能够正确提供待验证的CAS服务票根
    ConcurrentSessionControlAuthenticationStrategy.exceededAllowed=已经超过了当前主体({ 0})被允许的最大会话数量
    DigestAuthenticationFilter.incorrectRealm=响应结果中的Realm名字({ 0})同系统指定的Realm名字({ 1})不吻合
    DigestAuthenticationFilter.incorrectResponse=错误的响应结果
    DigestAuthenticationFilter.missingAuth=遗漏了针对'auth' QOP的、必须给定的摘要取值; 接收到的头信息为{ 0}
    DigestAuthenticationFilter.missingMandatory=遗漏了必须给定的摘要取值; 接收到的头信息为{ 0}
    DigestAuthenticationFilter.nonceCompromised=Nonce令牌已经存在问题了，{ 0}
    DigestAuthenticationFilter.nonceEncoding=Nonce未经过Base64编码; 相应的nonce取值为 { 0}
    DigestAuthenticationFilter.nonceExpired=Nonce已经过期/超时
    DigestAuthenticationFilter.nonceNotNumeric=Nonce令牌的第1部分应该是数字，但结果却是{ 0}
    DigestAuthenticationFilter.nonceNotTwoTokens=Nonce应该由两部分取值构成，但结果却是{ 0}
    DigestAuthenticationFilter.usernameNotFound=用户名{ 0}未找到
    JdbcDaoImpl.noAuthority=没有为用户{ 0}指定角色
    JdbcDaoImpl.notFound=未找到用户{ 0}
    LdapAuthenticationProvider.badCredentials=坏的凭证
    LdapAuthenticationProvider.credentialsExpired=用户凭证已过期
    LdapAuthenticationProvider.disabled=用户已失效
    LdapAuthenticationProvider.expired=用户帐号已过期
    LdapAuthenticationProvider.locked=用户帐号已被锁定
    LdapAuthenticationProvider.emptyUsername=用户名不允许为空
    LdapAuthenticationProvider.onlySupports=仅仅支持UsernamePasswordAuthenticationToken
    PasswordComparisonAuthenticator.badCredentials=坏的凭证
    #PersistentTokenBasedRememberMeServices.cookieStolen=Invalid remember-me token (Series/token) mismatch. Implies previous cookie theft attack.
    ProviderManager.providerNotFound=未查找到针对{ 0}的AuthenticationProvider
    RememberMeAuthenticationProvider.incorrectKey=展示RememberMeAuthenticationToken不含有预期的key
    RunAsImplAuthenticationProvider.incorrectKey=展示的RunAsUserToken不含有预期的key
    SubjectDnX509PrincipalExtractor.noMatching=未在subjectDN\: { 0}中找到匹配的模式
    SwitchUserFilter.noCurrentUser=不存在当前用户
    SwitchUserFilter.noOriginalAuthentication=不能够查找到原先的已认证对象

④Spring-security.xml配置

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans"
           xmlns:security="http://www.springframework.org/schema/security"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xsi:schemaLocation="http://www.springframework.org/schema/beans
        http://www.springframework.org/schema/beans/spring-beans.xsd
        http://www.springframework.org/schema/security
        http://www.springframework.org/schema/security/spring-security.xsd">
    
        
        <security:http pattern="/login.jsp" security="none"/>
        
        <security:http pattern="/showMassage.do" security="none"/>
        
        <security:http auto-config="true" use-expressions="true">
            
            
            <security:intercept-url pattern="/**" access="hasAnyRole('ROLE_ADMIN')"/>
            
            
            
            <security:form-login
                    login-page="/login.jsp"
                    login-processing-url="/login.do"
                    default-target-url="/login.jsp"
                    authentication-failure-url="/failer.jsp"
                    authentication-success-forward-url="/findAll.do"/>
    
            
            <security:csrf disabled="true"/>
            
            <security:logout invalidate-session="true" logout-url="/logout.do" logout-success-url="/login.jsp"/>
            
            <security:session-management>
                <security:concurrency-control error-if-maximum-exceeded="true" max-sessions="1"/>
            </security:session-management>
            
            <security:headers>
                <security:frame-options policy="SAMEORIGIN"/>
            </security:headers>
        </security:http>
        
        <bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"/>
    
        
        
        <security:global-method-security jsr250-annotations="enabled" pre-post-annotations="enabled"/>
        
        
    
        
        <security:authentication-manager>
            <security:authentication-provider user-service-ref="userService">
                
                <security:password-encoder ref="passwordEncoder"/>
            </security:authentication-provider>
        </security:authentication-manager>
        
        <bean id="messageSource" class="org.springframework.context.support.ReloadableResourceBundleMessageSource">
            <property name="basenames" value="classpath:messages"></property>
        </bean>
    </beans>

⑤SpringMVC.xml文件配置

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans"
           xmlns:mvc="http://www.springframework.org/schema/mvc"
           xmlns:context="http://www.springframework.org/schema/context"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xsi:schemaLocation="
               http://www.springframework.org/schema/beans
               http://www.springframework.org/schema/beans/spring-beans.xsd
               http://www.springframework.org/schema/mvc
               http://www.springframework.org/schema/mvc/spring-mvc.xsd
               http://www.springframework.org/schema/context
               http://www.springframework.org/schema/context/spring-context.xsd">
        
        <mvc:annotation-driven/>
        
        <context:component-scan base-package="cn.itcast"/>
    
        
        <bean id="internalResourceViewResolver" class="org.springframework.web.servlet.view.InternalResourceViewResolver">
            <property name="prefix" value="/pages/"/>
            <property name="suffix" value=".jsp"/>
        </bean>
    </beans>

## 注意点：资源位置如下 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70 3] ⑥pom文件配置

## 以上项目仅供参考，目前权限划分控制有待优化。。。。。 ##

[20191219004623798.png]: https://img-blog.csdnimg.cn/20191219004623798.png
[20191219004732150.png]: https://img-blog.csdnimg.cn/20191219004732150.png
[20191219004832438.png]: https://img-blog.csdnimg.cn/20191219004832438.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20191219005008838.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20191219010002439.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20191219010531569.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/2019121901120316.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MjE1NDc0,size_16,color_FFFFFF,t_70