RBACService是权限控制的服务,代码内容如下:
@Service("rbacService")
public class SecurityRBACServiceImpl implements ISecurityRBACService {
@Override
public boolean hasPermission(HttpServletRequest request, Authentication authentication) {
Object principal = authentication.getPrincipal();
if (principal instanceof UserDetails){
UserDetails userDetails = (UserDetails) principal;
SimpleGrantedAuthority simpleGrantedAuthority = new SimpleGrantedAuthority(request.getRequestURI());
return userDetails.getAuthorities().contains(simpleGrantedAuthority);
}
return false;
}
}