shiro方法级别采用注解方法,如下所示:
如果我们需要对于权限更加细化,可以采用代码级别:
之前未采用isPermitted代码时,我写的代码可够长,看来自己对于Shiro的研究还是有所欠缺。
if(allList.equals("0")){
UpmsUser upmsUser = upmsApiService.selectUpmsUserByUsername(username);
List<UpmsPermission> upmsPermissions = upmsApiService.selectUpmsPermissionByUpmsUserId(upmsUser.getUserId());
for (UpmsPermission upmsPermission : upmsPermissions) {
if(upmsPermission.getPermissionValue()!=null && upmsPermission.getPermissionValue().equals("itsla:accident:loadAuditEngineering")) {
String assigneeEngineer= ProcessUtils.PROCESS_ASSIGNEE_ENGINEER;
List<ItAccidentFlow> itAccidentFlowEngineerList = iItAccidentService.flowapprovedAccidentList(assigneeEngineer,meStarted);
model.addAttribute("itAccidentFlowEngineerList", itAccidentFlowEngineerList);
break;
}
}}