shiro中@RequiresPermissions注解使用

• • 使用创景
  • ShiroConfig类
  • controller类

Springboot整合Shiro：https://blog.csdn.net/muriyue6/article/details/120094538

ShiroConfig类增加下面配置，否则@RequiresPermissions注解不生效。

@Bean
public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager){
	AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
	authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
	return authorizationAttributeSourceAdvisor;
}

在 controller类上加@RequiresPermissions(value={“xxx:xxx”,“xxx:xxx”}) 注解。

@RestController
@RequestMapping("app/invest")
@Slf4j
public class InvestController {

    @RequestMapping("/listNew")
	@RequiresPermissions("app:invest:list")
    public ResponseUtil listNew(User user){
        //TODO 
		......
    }
}