servlet容器struts2actionservice,service調用dao實現(xiàn)的有好幾個子系統(tǒng)的權限，這種做法是為力的shiro中對"用戶"用戶登錄系統(tǒng)以后，獲取到該用戶能夠的權限值，當用戶某一個方有，則，如果沒有，則。是用來數(shù)據(jù)源url的控制1pom.xml文件中2web.xml3springshiro <propertyname="loginUrl"<propertyname="successUrl"<propertyname="unauthorizedUrl"<propertyname="securityManager"<property/login.jsp*=/loginAction_login.action*=/*.action*=webspringbeanid1realmrealmAuthorizingRealmusername和password，如果返回一個對象，則null，說明驗證失敗passwordpassword對比，如果一樣，則成功，如果不一樣null,用戶名都不存在1applicationContext-shiro.xml <propertyname="securityManager"ref="securityManager"depends-on="lifecycleBeanPostProcessor"/>2OARealmprotectedAuthorizationInfodoGetAuthorizationInfo(PrincipalCollectionprincipals){SimpleAuthorizationInfoauthorizationInfo=new//根據(jù)用戶獲取權限，把用戶能夠到的權限封裝在authorizationInfo對象中Useruser=(User)SecurityUtils.getSubject().getSession().getAttribute("user");Collection<Privilege>privileges= privileges=privileges=}for(Privilegeprivilege:privileges){}return}3servicepublicclassDepartmentServiceImpl implementsDepartmentService{privateDepartmentDaopublicCollection<Department>getAllDepartment()//TODOAuto-generatedmethodstubreturnthis.departmentDao.queryEntry();}}4realm2、realmsecurityManagersecurityManager對于程序員來說是透明的，所以securityManager內部是怎么樣運行的3realmspringrealmservice4、只需要在realm中完成操作，在相應的方法