yaoyuan2.chu
39 lines
1.1 KiB
Java
39 lines
1.1 KiB
Java
package com.yaoyuan.jiscuss.handler;
|
|
|
|
import org.springframework.security.core.Authentication;
|
|
import org.springframework.stereotype.Component;
|
|
import org.springframework.util.AntPathMatcher;
|
|
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import java.util.List;
|
|
|
|
/**
|
|
* RBAC数据模型控制权限
|
|
*
|
|
* @author charlie
|
|
*/
|
|
@Component("rbacPermission")
|
|
public class RbacPermission {
|
|
|
|
private AntPathMatcher antPathMatcher = new AntPathMatcher();
|
|
|
|
public boolean hasPermission(HttpServletRequest request, Authentication authentication) {
|
|
Object principal = authentication.getPrincipal();
|
|
boolean hasPermission = false;
|
|
|
|
hasPermission = true;
|
|
// if (principal instanceof UserEntity) {
|
|
// // 读取用户所拥有的权限菜单
|
|
// List<Menu> menus = ((UserEntity) principal).getRoleMenus();
|
|
// System.out.println(menus.size());
|
|
// for (Menu menu : menus) {
|
|
// if (antPathMatcher.match(menu.getMenuUrl(), request.getRequestURI())) {
|
|
// hasPermission = true;
|
|
// break;
|
|
// }
|
|
// }
|
|
// }
|
|
return hasPermission;
|
|
}
|
|
}
|