记一次报错 This subject is anonymous

报错信息：

org.apache.shiro.authz.UnauthenticatedException: This subject is anonymous - it does not have any identifying principals and authorization operations require an identity to check against.  A Subject instance will acquire these identifying principals automatically after a successful login is performed be executing org.apache.shiro.subject.Subject.login(AuthenticationToken) or when 'Remember Me' functionality is enabled by the SecurityManager.  This exception can also occur when a previously logged-in Subject has logged out which makes it anonymous again.  Because an identity is currently not known due to any of these conditions, authorization is denied.

解决方法：

在shiro的配置文件中，有同事把所有的请求都放行了，导致权限信息没加进去。

filterMap.put("/**/**", "anon");

把这行代码去掉后，运行正常。