RBACService是权限控制的服务,代码内容如下:

    1. @Service("rbacService")
    2. public class SecurityRBACServiceImpl implements ISecurityRBACService {
    3. @Override
    4. public boolean hasPermission(HttpServletRequest request, Authentication authentication) {
    5. Object principal = authentication.getPrincipal();
    6. if (principal instanceof UserDetails){
    7. UserDetails userDetails = (UserDetails) principal;
    8. SimpleGrantedAuthority simpleGrantedAuthority = new SimpleGrantedAuthority(request.getRequestURI());
    9. return userDetails.getAuthorities().contains(simpleGrantedAuthority);
    10. }
    11. return false;
    12. }
    13. }