shiro中@RequiresPermissions注解使用

使用创景

Springboot整合Shiro：https://blog.csdn.net/muriyue6/article/details/120094538

ShiroConfig类

ShiroConfig类增加下面配置，否则@RequiresPermissions注解不生效。

/**
* 开启shiro aop注解支持，使用代理方式; 所以需要开启代码支持; Controller才能使用@RequiresPermissions
*
*/
@Bean
public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager){
    
    
	AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
	authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
	return authorizationAttributeSourceAdvisor;
}

controller类

在 controller类上加@RequiresPermissions(value={“xxx:xxx”,“xxx:xxx”}) 注解。

@RestController
@RequestMapping("app/invest")
@Slf4j
public class InvestController {
    
    

    @RequestMapping("/listNew")
	@RequiresPermissions("app:invest:list")
    public ResponseUtil listNew(User user){
    
    
        //TODO 
		......
    }
}