SSM项目，使用拦截器进行权限控制

拦截器定义

public class PermissionInterceptor extends HandlerInterceptorAdapter {

    @Autowired
    private AdminUserRoleService adminUserRoleService;

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        AdminUser adminUser = (AdminUser) request.getSession().getAttribute("adminUser");
        //如果用户还没有登录，让用户去登录
        if (adminUser == null) {
            //返回json格式的权限不足信息
            if (CommonUtils.isEmpty(request.getHeader("x-requested-with"))) {
                response.getWriter().print("需要重新登录");
            } else {
                response.getWriter().print(JsonUtils.toJson(AjaxResult.errorInstance("需要重新登录")));
            }
            return false;
        }
           
        //请求路径
        String servletPath = request.getServletPath();
        //检查权限
        boolean result &