1、關於權限系統，對於用戶是否有權限對系統進行訪問，設置自定義攔截器，來攔截用戶的請求

 1 package org.slsale.interceptor;
 2 
 3 import javax.annotation.Resource;
 4 import javax.servlet.http.HttpServletRequest;
 5 import javax.servlet.http.HttpServletResponse;
 6 import javax.servlet.http.HttpSession;
 7 
 8 import org.apache.log4j.Logger;
 
 9 import org.slsale.common.Constants;
10 import org.slsale.common.RedisAPI;
11 import org.slsale.pojo.User;
12 import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
13 
14 /**
15  * 自定義攔截器，攔截請求(是否有權限訪問)
16  * @author lzw
17  * 2017-7-11
18  * 每個人都有自己的夢想。努力拼搏吧!不要讓自己後悔!
19  */
20 public
 
 class SysInterceptor extends HandlerInterceptorAdapter {
21     private Logger logger = Logger.getLogger(SysInterceptor.class);
22     @Resource
23     private RedisAPI redisAPI;
24 
25     @Override
26     public boolean preHandle(HttpServletRequest request,
27             HttpServletResponse response, Object handler) throws
 
 Exception {
28         HttpSession session = request.getSession();
29         String urlPath = request.getRequestURI();
30 
31         User user = (User) session.getAttribute(Constants.SESSION_USER);
32         if (null == user) {// 如果session中user為空，返回登錄頁面
33             response.sendRedirect("/");
34             return false;
35         } else {
36             String key = "Role" + user.getRoleId() + "UrlList";
37             String urls = redisAPI.get(key);
38             if (urls != null && !"".equals(urls) && urls.indexOf(urlPath) > 0) {
39                 return true;
40             } else {
41                 response.sendRedirect("/401.html");
42                 return false;
43             }
44         }
45     }
46 
47 }

自定義攔截器判斷用戶是否有權限訪問