ssm权限管理代码与图解

权限管理代码与图解

@getter@setter
public class Permission extends BaseDomain{
    private String name;//权限名称
    private String expression;//权限表达式，每一个权限唯一描述
}

public abstract class PermissionUtil {
    public  static String buildExpression(Method m){
        //方法所在类的全限定名：方法名称
        String className = m.getDeclaringClass().getName();
        return className+":"+m.getName();
    }
}

@Controller
@RequestMapping("permission")
public class PermissionController {
    @Autowired
    private IPermissionService permissionService;
    /**
     * 加载权限
     * @return 不需要返回视图
     * @throws Exception
     */
    @RequiredPermission("加载权限")
    @RequestMapping("reload")
    public ModelAndView reload() throws Exception{
        permissionService.reload();
        return null;
    }
}

public interface IPermissionService {
    /*
    * 加载系统中的权限
    * */
    void reload();
}
 

@Service
public class PermissionServiceImpl implements IPermissionService {
    @Autowired
    private PermissionMapper permissionMapper;

    @Autowired
    private ApplicationContext ctx;

    public void reload() {
        //先查询数据库中已有的权限表达式
        List<String> exprs = permissionMapper.selectAllExpression();
        //1：从容器中获取到所有的Controller对象
        Collection<?> beans = ctx.getBeansWithAnnotation(Controller.class).values();
        for (Object ctrl : beans) {
            //2：拿到Controller对象对应的字节码,获取Controller中所有的方法对象
            Method[] methods = ctrl.getClass().getDeclaredMethods();
            for (Method m : methods) {
                //3：判断每一个方法是否有权限注解
                RequiredPermission anno = m.getAnnotation(RequiredPermission.class);
                if (anno != null){
                    //4：从自定义工具类中获取到权限表达式
                    String exp = PermissionUtil.buildExpression(m);
                    //5：判断exprs集合中有没有exp子字符串,不包含该权限才保存
                    if (!exprs.contains(exp)){
                        //6：如果有注解，把该方法做成一个权限对象保存到数据库
                        Permission p = new Permission();
                        p.setName(anno.value());
                        p.setExpression(exp);
                        //7：保存到数据库
                        permissionMapper.insert(p);
                    }
                }
            }
        }
    }
}

public interface PermissionMapper {
    //把需要被标注为权限的查询出来保存到数据库中
    void insert(Permission entity);

    //查询数据库中已有的权限
    List<String> selectAllExpression();
}

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE mapper  PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"  
"http://mybatis.org/dtd/mybatis-3-mapper.dtd">
<mapper namespace="xxx.PermissionMapper">
	<insert id="insert" useGeneratedKeys="true" keyProperty="id">
		insert into permission(name,expression)
		values (#{name},#{expression})
	</insert>

	<select id="selectAllExpression" resultType="string">
		select expression from permission;
	</select>
</mapper>