Shiro笔记（三）授权

Shiro笔记（三）授权

一、授权方式

1.编程式:

 Subject subject=SecurityUtils.getSubject();
 if(subject.hasRole("root")){
     //有权限
 } else {
     //无权限
 }

2.注解式：

 @RequiresRoles("admin")
 public void hello(){
     //有权限才执行
 }

3.JSP标签：

 <shiro:hasRole name="root">

 <!--有权限-->
 </shiro:hasRole>

二、授权

1.基于角色的访问控制

规则：用户名=密码，角色1，角色2......

shiro-role.ini文件：

 [users]
 tang=123,role1,role2
 wang=321,role1

核心代码：

 /**
  * @author Tang Jiujia
  * @since 2017-10-16
  */
 public class RoleTest extends BaseTest{

     @Test
     public void testHasRole(){
         login("src/main/shiro-role.ini","tang","123");
         Subject subject= SecurityUtils.getSubject();
         Assert.assertTrue(subject.hasRole("role1"));
         Assert.assertTrue(subject.hasAllRoles(Arrays.asList("role1","role2")));
         boolean[] hasRoles = subject.hasRoles(Arrays.asList("role1", "role2", "role3"));

         for (int i=0;i<3;i++){
             if (hasRoles[i]==true){
                 System.out.println("We have role"+(i+1));
             }else {
                 System.out.println("We don't have role"+(i+1));
             }
         }
     }
 }

 //checkRole与前面的hasRole不同的地方在于判断为假时会抛UnauthorizedException
     @Test(expected = UnauthorizedException.class)
     public void testCheckRole(){
         login("src/main/shiro-role.ini","tang","123");
         Subject subject= SecurityUtils.getSubject();
         subject.checkRole("role1");
         subject.checkRoles("role1","role5");
     }

2.基于资源的访问控制

规则：用户名=密码，角色1，角色2            角色=权限1，权限2

 [users]
 tang=123,role1,role2
 wang=321,role2
 [roles]
 role1=root:create,root:add,root:update
 role2=root:delete,root:update

核心代码：

 /**
  * @author Tang Jiujia
  * @since 2017-10-16
  */
 public class PermissionTest extends BaseTest{

     @Test
     public void testIsPermission(){
         login("src/main/shiro-permission.ini","tang","123456");
         Subject subject = SecurityUtils.getSubject();
         if (subject.isPermitted("root:add1")) {
             System.out.println("have add");
         } else {
             System.out.println("do not have add");
         }
         if (subject.isPermitted("root:update")) System.out.println("Have update permission");
     }

     @Test
     public void testCheckPermission(){
         login("src/main/shiro-permission.ini","tang","123456");
         Subject subject = SecurityUtils.getSubject();
         subject.checkPermission("root:add");
     }
 }