Shiro页面权限拦截

@Override
	protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
		SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
		Users users=UserUtil.getUser();
		String userType=users.getUserType();
		authorizationInfo.addRole(userType);
		return authorizationInfo;
	}

先加入角色

filterChain.put("/拦截路径/*", "roles[business]");

设置路径拦截

shiroFilterFactoryBean.setUnauthorizedUrl("/角色权限不足的页面");

设置权限(角色)不匹配的跳转页面

你可能感兴趣的:(Java,安全)