直接切入主題
事前准備 shiro單個權限能正常使用的情況下 :
1 重寫AuthorizingRealm子類的isPermitted方法
private static final String OR_OPERATOR = " OR ";
private static final String AND_OPERATOR = " AND ";
@Override
public boolean isPermitted(PrincipalCollection principals, String permission) {
//return super.isPermitted(principals,permission);
if (permission.contains(OR_OPERATOR)) {
//如果有任何一個權限,返回true,否則返回false
String[] permissions = permission.split(OR_OPERATOR);
for (String p : permissions) {
//只要有一個權限是通過驗證的就返回true
if (super.isPermitted(principals,p)) {
return true;
}
}
return false;
}else if (permission.contains(AND_OPERATOR)) {
String[] permissions = permission.split(AND_OPERATOR);
for (String p : permissions) {
//只要有一個權限不是true的,我們就返回假
if (!super.isPermitted(principals,p)) {
return false;
}
}
return true;
}else{//不包含 OR AND 的走原來邏輯
return super.isPermitted(principals,permission);
}
}
2.頁面