java 用户权限,用户权限javaweb实现

用户+角色+权限javaweb实现

------------------------------------------------------------------------------------

权限控制表设计(用户+角色+权限)

大概有这几种模式：

用户+组+角色+权限

用户+组+权限

用户+角色+权限

用户+权限

两种权限管理，其一是功能权限的管理，而另外一种则是资源权限的管理 A.数据库表形式 1.用户表 用户编号, 用户名, 密码, 角色编号   2.角色表 角色编号, 角色名   3.功能表(主要保存系统功能清单) 编号, 功能名称, 父编号, URL 4.角色权限对应表  编号, 角色编号, 功能编号, 权限   ------------------------------------------------------------------------------------ import java.util.Set;           public class UserVo {          private Integer id;          private String uname;          private String password;          private Level level;                                        public Level getLevel() {              return level;          }          public void setLevel(Level level) {              this.level = level;          }          public String getUname() {              return uname;          }          public void setUname(String uname) {              this.uname = uname;          }          public String getPassword() {              return password;          }          public void setPassword(String password) {              this.password = password;          }          public Integer getId() {              return id;          }          public void setId(Integer id) {              this.id = id;          }           }                     public class Level {          private Integer id;          private String levelName;          private Set qx = new HashSet(0);          public Integer getId() {              return id;          }          public void setId(Integer id) {              this.id = id;          }          public String getLevelName() {              return levelName;          }          public void setLevelName(String levelName) {              this.levelName = levelName;          }          public Set getQx() {              return qx;          }          public void setQx(Set qx) {              this.qx = qx;          }      }           public class Quanxian {          private Integer id;          private String quanxian;          private Integer fatherid;          private String url;          public Integer getFatherid() {              return fatherid;          }          public void setFatherid(Integer fatherid) {              this.fatherid = fatherid;          }          public Integer getId() {              return id;          }          public void setId(Integer id) {              this.id = id;          }          public String getQuanxian() {              return quanxian;          }          public void setQuanxian(String quanxian) {              this.quanxian = quanxian;          }          public String getUrl() {              return url;          }          public void setUrl(String url) {              this.url = url;          }           }                public class AdminLoginCheck extends HttpServlet implements Filter {           //通过 一个过滤器 Filter 进行权限控制             private FilterConfig filterConfig;              //Handle the passed-in FilterConfig                            public void init(FilterConfig filterConfig) throws ServletException {                  this.filterConfig = filterConfig;                   }                   //Process the request/response pair              public void doFilter(ServletRequest request, ServletResponse response,                                   FilterChain filterChain) {//System.out.println(this.getClass()+": doFilter()");                  HttpServletRequest req = (HttpServletRequest)request;                  //System.out.println(req.getServletPath());                                    HttpServletResponse res = (HttpServletResponse)response;                  HttpSession ses = req.getSession();      Uservo uervo =ses.getAttribute("user")                  try {//System.out.println("in Adminloginf........");                      if(uervo ==null)                      {                      res.sendRedirect(req.getContextPath());                      }else{                       Boolean allow= false ;                       Set qxs = uservo.getLevel().getQx();                       For(Quanxian o:qxs){                          If(o.getUrl().equals(req.getServletPath())){      allow=true;      }      }      If(allow){       filterChain.doFilter(request, response);}                      }                  } catch (ServletException sx) {                      filterConfig.getServletContext().log(sx.getMessage());                  } catch (IOException iox) {                      filterConfig.getServletContext().log(iox.getMessage());                  }              }                   //Clean up resources              public void destroy() {              }      }