框架中拦截器的使用教程和权限的控制

----------------------------------------------------------------------------
拦截所有后缀为.do的请求,交给Resources包下的spring-mvc.xml处理
----------------------------------------------------------------------------
 <servlet>
    <servlet-name>spring</servlet-name>
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    <init-param>
      <param-name>contextConfigLocation</param-name>
      <param-value>classpath*:spring-mvc.xml</param-value>
    </init-param>
  </servlet>
  <servlet-mapping>
    <servlet-name>spring</servlet-name>
    <url-pattern>*.do</url-pattern>
  </servlet-mapping>

----------------------------------------------------------------------------
在spring-mvc.xml中定义多个拦截器,顺序执行拦截
----------------------------------------------------------------------------

<mvc:interceptors>
    <mvc:interceptor>
        <!--拦截处理的请求格式-->
        <mvc:mapping path="/site/**" />
        <!--拦截处理类-->
        <bean class="com.demo.interceptor.UserInterceptor"></bean>
    </mvc:interceptor> 
    <mvc:interceptor>
        <mvc:mapping path="/list/**" />
        <bean class="com.demo.interceptor.PowerInterceptor"></bean>
    </mvc:interceptor>
</mvc:interceptors>  

----------------------------------------------------------------------------
按照用户类型在管理请求路径

1.request.getRequestDispatcher("/user/login.jsp"):取得一个RequestDispatcher(分发器对象)
2.forward(request,response)作用是将请求转发到指定页面
----------------------------------------------------------------------------
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
        throws Exception {
    User user = (User) request.getSession().getAttribute("login_User");

    if(user == null){
        request.getRequestDispatcher("/user/login.jsp").forward(request, response);
        return false;
    }else{
        String requestAction=null;
        Boolean isContainsRequestAction=false;
        if(user.getPower()==1){

            //例如:http://localhost:8080/Demo/site/page0.do
            //此时requestAction就为:/site/page0.do
            requestAction=request.getServletPath();

            //请求的路径是否包含在数组中
            isContainsRequestAction = ArrayUtils.contains(StringUtil.webSiteManagePower, requestAction);
            if(!isContainsRequestAction){
                request.getRequestDispatcher("/user/login.jsp").forward(request, response);
                return false;
            }else{
                ...
                return true;
            }
            return true;
        }else if(user.getPower()==2){
            ...
            return true;
        }else if(user.getPower()==3){
            ...
            return true;
        }else if(user.getPower()==4){
            ...
            return true;
        }else{
            ...
            return true;
        }

    }
}

----------------------------------------------------------------------------
设置网站管理访问请求的权限限制 StringUtil.java工具类
----------------------------------------------------------------------------
public static final String[] webSiteManagePower = new String[]{
    "/site/page0.do",
    "/site/page1.do",
    "/site/page2.do",
};