利用session控制权限

	public ModelAndView login(String loginName, String password, HttpServletRequest request) {
		ModelAndView mav = new ModelAndView();
		try {
			//securityService().authenticate(loginName, password);
			Subject currentUser = SecurityUtils.getSubject();

		    Session session = currentUser.getSession();
	        session.setAttribute("isAdmin", "1");

页面中：

       <c:if test="${sessionScope.isAdmin eq 1}">
          	<li style="text-align: left;">
	            <a href="personal_view/show_action.do" target="content" class="tooltip-tip tooltipster-disable">
	              <i class="icon icon-home"></i>
	              <span style="display: inline-block; float: none;">个人首页</span></a>
	          </li>
	          </c:if>