Shiro 权限标签和注解(九)

本是古典何须时尚 2024-02-18 21:02 10阅读 0赞

一.权限标签

<shiro:guest>
        游客访问 <a href = "login.jsp"></a>
    </shiro:guest>
     
    user 标签：用户已经通过认证\记住我 登录后显示响应的内容
    <shiro:user>
        欢迎[<shiro:principal/>]登录 <a href = "logout">退出</a>
    </shiro:user>
     
    authenticated标签：用户身份验证通过，即 Subjec.login 登录成功 不是记住我登录的
    <shiro:authenticted>
        用户[<shiro:principal/>] 已身份验证通过
    </shiro:authenticted>
     
    notAuthenticated标签：用户未进行身份验证，即没有调用Subject.login进行登录,包括"记住我"也属于未进行身份验证
    <shiro:notAuthenticated>
        未身份验证(包括"记住我")
    </shiro:notAuthenticated>
     
     
    principal 标签：显示用户身份信息，默认调用
    Subjec.getPrincipal()获取，即Primary Principal
    <shiro:principal property = "username"/>
     
    hasRole标签：如果当前Subject有角色将显示body体内的内容
    <shiro:hashRole name = "admin">
        用户[<shiro:principal/>]拥有角色admin
    </shiro:hashRole>
     
    hasAnyRoles标签：如果Subject有任意一个角色(或的关系)将显示body体里的内容
    <shiro:hasAnyRoles name = "admin,user">
        用户[<shiro:pricipal/>]拥有角色admin 或者 user
    </shiro:hasAnyRoles>
     
    lacksRole:如果当前 Subjec没有角色将显示body体内的内容
    <shiro:lacksRole name = "admin">
        用户[<shiro:pricipal/>]没有角色admin
    </shiro:lacksRole>
     
    hashPermission:如果当前Subject有权限将显示body体内容
    <shiro:hashPermission name = "user:create">
        用户[<shiro:pricipal/>] 拥有权限user:create
    </shiro:hashPermission>
     
    lacksPermission:如果当前Subject没有权限将显示body体内容
    <shiro:lacksPermission name = "org:create">
        用户[<shiro:pricipal/>] 没有权限org:create
    </shiro:lacksPermission>

使用时必须先导入包

![20180609150527240][]

<h1>List JSP!</h1>
    <p>Welcome: <shiro:principal></shiro:principal></p>

![20180609150533788][]

![20180609150548719][]

![20180609150630236][]

二.权限注解

@RequiresAuthenthentication:表示当前Subject已经通过login进行身份验证;即 Subjec.isAuthenticated()返回 true
     
    @RequiresUser:表示当前Subject已经身份验证或者通过记住我登录的,
     
    @RequiresGuest:表示当前Subject没有身份验证或者通过记住我登录过，即是游客身份
     
    @RequiresRoles(value = {"admin","user"},logical = Logical.AND):表示当前Subject需要角色admin和user
     
    @RequiresPermissions(value = {"user:delete","user:b"},logical = Logical.OR):表示当前Subject需要权限user:delete或者user:b

创建一个业务类

![20180609150754507][]

控制类中注入业务对象

![20180609150834143][]

在application.xm文件配置bean忽略

测试

![20180609150910285][]

用mike登录,在单击testAnnotation超链接就发生异常哦!

![20180609150943560][]

![20180609150659373][]

说明:没有这个权限哦!

[20180609150527240]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/f6b7a934381044ad8938f84d662b938c.png
[20180609150533788]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/f1a9c4c84833425f869001d87e698f79.png
[20180609150548719]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/d5b866998370461f872e409d624fb4e5.png
[20180609150630236]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/94b0473dd1eb47f0a82bf890829c9ed8.png
[20180609150754507]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/ddfb7ed49bda4b978e14f065ec8b78eb.png
[20180609150834143]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/d2b6f1da685e462a93d85bf61db4e83e.png
[20180609150910285]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/16173f1f9d7e4e9395d00350154b59ca.png
[20180609150943560]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/bbab19f320894a30813b81ad2518aac0.png
[20180609150659373]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/77a3917c129e4e2abd09b15347ded335.png