java自定义标签(改造spring security配合控制按钮权限)

参考 http://gaojiewyh.iteye.com/blog/1501470

自定义一个简单的标签，传入按钮对应的url后台判断该用户是否有对应权限访问按钮。

tag java类   通过SpringWiredBean获取对应的bean获取权限数据(SpringWiredBean查看我的另一篇文章)

如果直接使用bean会报错：奇怪的错

javax.naming.NameNotFoundException Name com.eversec.satanbox.security.tag.AuthorizeTag is not bound in this Context

package com.eversec.satanbox.security.tag;

import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.jsp.tagext.BodyTagSupport;

import org.springframework.stereotype.Component;

import com.eversec.satanbox.base.Constant;
import com.eversec.satanbox.entity.SysUser;
import com.eversec.satanbox.security.CustomInvocationSecurityMetadataSourceService;
import com.eversec.satanbox.util.SpringWiredBean;

@Component
public class AuthorizeTag extends BodyTagSupport{
	
	/**
	 * 
	 */
	private static final long serialVersionUID = 1L;

	private String buttonUrl;
	private String currentUser;


	public String getButtonUrl() {
		return buttonUrl;
	}


	public void setButtonUrl(String buttonUrl) {
		this.buttonUrl = buttonUrl;
	}


	public String getCurrentUser() {
		return currentUser;
	}

	public void setCurrentUser(String currentUser) {
		this.currentUser = currentUser;
	}


	@Override
	public int doStartTag(){
		SysUser sysUser = (SysUser)(((HttpServletRequest)this.pageContext.getRequest()).getSession().getAttribute(Constant.SESSION_USER_KEY));
		
		CustomInvocationSecurityMetadataSourceService customSecurityMetadataSource = (CustomInvocationSecurityMetadataSourceService)SpringWiredBean.getInstance().getBeanById("customSecurityMetadataSource");
		List list = customSecurityMetadataSource.getUserSecurityMap().get(sysUser.getUsername());
		
		if (list != null && list.contains(buttonUrl)) {
				return EVAL_BODY_INCLUDE;
		}
		
		return this.SKIP_BODY;
	}

}

authorize.tld 放在WEB-INF下面

  
  
          
          
          
        1.0  
        security  
        http://www.springsecurity.org/jsp  
          
              
              
              
            authorize  
              
                com.eversec.satanbox.security.tag.AuthorizeTag
              
            JSP  
              
                buttonUrl  
                false  
                true  
                java.lang.String  
              
               
                currentUser  
                false  
                true  
                java.lang.String  
              
          
      

在web.xml中添加如下内容

	
      
        http://www.springsecurity.org/jsp  
        /WEB-INF/authorize.tld  
     
    

在jsp中添加如何标签引用，以及使用方式示例

<%@ taglib uri="http://www.springsecurity.org/jsp" prefix="security"%>  


					
						
							
							新建