ini方式检查用户拥有权限

编写shiro-permission.ini配置文件

[users]
#用户zhang的密码是123，此用户具有role1和role2两个角色
zhangsan=666,role1,role2
lisi=888,role2
[roles]
#角色role1对资源user拥有create、update权限
role1=user:create,user:update
#角色role2对资源user拥有create、delete权限
role2=user:create,user:delete
#角色role3对资源user拥有create权限
role3=user:create

编写测试程序

public class MyTest {

    @Test
    public void hasRole(){

        Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro-permission.ini");
        SecurityManager securityManager = factory.getInstance();
        SecurityUtils.setSecurityManager(securityManager);
        Subject subject = SecurityUtils.getSubject();
        UsernamePasswordToken token = new UsernamePasswordToken("zhangsan", "666");
        try {
            subject.login(token);
        }catch (Exception e){
            e.printStackTrace();
        }

        //进行授权操作时：用户必须通过认证
        //判断用户是否拥有某个权限，返回true表示拥有
        System.out.println(subject.isPermitted("user:delete"));
        //判断当前用户是否拥有一些权限
        System.out.println(subject.isPermittedAll("user:create","user:delete"));
        //判断当前用户是否拥有一些权限,返回boolean数组
        System.out.println(Arrays.toString(subject.isPermitted("user:list","user:create")));
        //判断用户是否拥有某个权限，如果没有报异常:UnauthorizedException
        subject.checkPermission("user:list");

    }


}