@RequiresPermissions("sys:admin:view")有啥用

Posted 2023-04-12

看到公司的源码 看到这个注释不明白 希望各位大神给予帮助

参考技术A 在需要进行授权访问的业务层方法上添加执行此方法需要的权限标识

shiro @RequiresRoles 和 @@RequiresPermissions 注解失效问题

需要配置以下三个bean

    @Bean
    public LifecycleBeanPostProcessor lifecycleBeanPostProcessor(){
        return new LifecycleBeanPostProcessor();
    }

    @Bean
    public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator(){
        DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
        defaultAdvisorAutoProxyCreator.setProxyTargetClass(true);
        return defaultAdvisorAutoProxyCreator;
    }

    @Bean
    public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(@Autowired DefaultWebSecurityManager securityManager) {
        AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
        authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
        return authorizationAttributeSourceAdvisor;

    }

 

否则的话只能采用 subject.hasRole() 等代码的方式才能触发 Realm中的授权方法