代码方式授权

@Controller
@RequestMapping("order")
public class OrderController {
    @RequestMapping("save")
    public String save(){
        System.out.println("进入方法");
        //获取主体对象
        Subject subject = SecurityUtils.getSubject();
        //代码方式
        if (subject.hasRole("admin")) {
            System.out.println("保存订单！");
        } else {
            System.out.println("无权访问");
        }
        return "redirect:/index.jsp";
    }
}