以下是本人在项目中用Java TagSupport实现的Web非权限验证标签: package com.sunfairs.tags; import javax.servlet.http.HttpSession; import javax.servlet.jsp.JspException; import javax.servlet.jsp.tagext.TagSupport; import com.sunfairs.constant.ShopConstants; public class NoAuthorityTag extends TagSupport { private String power; public String getPower() { return power; } public void setPower(String power) { this.power = power; } @Override public int doAfterBody() throws JspException { return super.doAfterBody(); } @Override public int doEndTag() throws JspException { return super.doEndTag(); } @Override public int doStartTag() throws JspException { HttpSession session = pageContext.getSession(); String userPower = (String) session.getAttribute(ShopConstants.LOGIN_POWER); if(power.indexOf(userPower) == -1||power.equals("*")){ return EVAL_PAGE; } return SKIP_BODY; } }