RBAC权限管理+自定义标签

蔚落 2022-05-26 06:13 232阅读 0赞

#  #

场景：角色分为一级管理员和二级管理员；一级管理员拥有增删改查权限；二级管理员拥有查权限；用户1是一级管理员；用户2为二级管理员；登陆后不同身份管理员看到的内容不同。

# 一、库表设计 #

![20180426153110820][]

用户     角色     资源 三个实体

用户 <-----> 角色：多对多

角色 <-----> 资源：多对多

# 二、实体设计，登录功能  #

主要功能代码：

Person.java

public class Person implements Serializable {
        private Long uid;
    
        private String username;
    
        private String password;
    
        private List<Resource> resourceList = new ArrayList<Resource>();

Resource.java

public class Resource {
    
        private int rid;
        private String resourceurl;

Role.java

public class Role {
    
        private int id;
        private String name;

mapper文件：

<?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
    <mapper namespace="com.manage.dao.PersonMapper">
    
        <resultMap id="personMap" type="com.manage.model.Person">
        <id property="uid" column="uid"></id>
        <result property="username" column="uname"></result>
        <result property="password" column="uage"></result>
        <collection property="resourceList" ofType="com.manage.model.Resource">
            <id column="rid" property="rid"></id>
            <result property="resourceurl" column="resource"></result>
        </collection>
    </resultMap>
    
        
        <select id="select" resultMap="personMap">
            SELECT u.id uid,u.name uname,u.age uage,t2.id rid,t2.resource resource FROM tuser u INNER JOIN user_role r ON u.id = r.userid
            INNER JOIN trole t ON r.roleid = t.id
            INNER JOIN role_resource r3 ON t.id = r3.roleid
            INNER JOIN tresource t2 ON r3.resourceid = t2.id
            WHERE u.name=#{name} AND u.age=#{age}
        </select>
    
    
    
    </mapper>

controller:

@Controller
    @RequestMapping("/user")
    public class MainController {
    
        @Autowired
        private TestService testService;
    
        @RequestMapping(value = "/login")
        public ModelAndView login(@RequestParam("name") String name,
                                  @RequestParam("age") int age,
                                  HttpServletRequest request) {
            Person person = testService.login(name, age);
            if (person == null) {
                ModelAndView modelAndView = new ModelAndView("loginError", "username", name);
                return modelAndView;
            }
            request.getSession().setAttribute("user", person);

//将用户资源放入session
            request.getSession().setAttribute("resourceurl", person.getResourceList());
            ModelAndView modelAndView = new ModelAndView("loginSuccess");
            return modelAndView;
        }
    
    }

#  #

### 三、自定义标签及使用 ###

自定义标签类：

public class Mytag extends TagSupport {
    
        private String resource;
    
        public String getResource() {
            return resource;
        }
    
        public void setResource(String resource) {
            this.resource = resource;
        }
    
        @Override
        public int doStartTag() throws JspException {
            HttpSession session = pageContext.getSession();
            List<Resource> resourceList = (List<Resource>) session.getAttribute("resourceurl");
            for (Resource r : resourceList//判断是否拥有资源
                    ) {
                System.out.println(r+"====================");
                System.out.println(resource+"=====");
                if (r.getResourceurl().equals(resource)) {
                    return EVAL_BODY_INCLUDE;//保留标签体
                }
            }
            return SKIP_BODY;//忽略标签体
        }
    
        @Override
        public int doEndTag() throws JspException {
            return EVAL_PAGE;//保留标签体后内容，一般情况下都保留
        }
    }

tld文件：

<?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE taglib PUBLIC "-//Sun Microsystems, Inc.//DTD JSP Tag Library 1.2//EN"
            "http://java.sun.com/dtd/web-jsptaglibrary_1_2.dtd">
    <taglib>
        <tlib-version>1.0</tlib-version>
        <jsp-version>1.2</jsp-version>
        
        <short-name>mlj</short-name>
        
        <uri>/mlj-tags</uri>
        <tag>
            
            <name>resource</name>
            
            <tag-class>com.manage.tag.Mytag</tag-class>
            <body-content>JSP</body-content>
            
            <attribute>
                
                <name>resource</name>
                
                <required>true</required>
                <rtexprvalue>true</rtexprvalue>
                
                <type>java.lang.String</type>
            </attribute>
        </tag>
    </taglib>

页面：

<%@ page contentType="text/html;charset=UTF-8" language="java" pageEncoding="utf-8"%>
    <%@ taglib prefix="c" uri="http://java.sun.com/jstl/core"%>
    <%@taglib prefix="mlj" uri="/mlj-tags" %>
    <html>
    <head>
        <title>登录成功</title>
    </head>
    <body>
        <h2>恭喜您！${sessionScope.user.username},您的年龄是${sessionScope.user.password}岁</h2>
        <mlj:resource resource="增"><a href="#">增加</a></mlj:resource>
        <mlj:resource resource="删"><a href="#">删除</a></mlj:resource>
        <mlj:resource resource="改"><a href="#">修改</a></mlj:resource>
        <mlj:resource resource="查"><a href="#">查找</a></mlj:resource>
    </body>
    </html>

# 四、演示     #

登录页面：

![20180426162800799][]

![Image 1][] ![20180426162656728][]

![20180426162709628][]

![20180426162719146][]

![Image 1][]

# 五、问题和解决 #

## 1、idea引用外部标签库不识别？ ##

![Image 1][]![20180426162619877][]

url填写自定义标签内设置的url;

file：找到项目中自定义的tld文件；

![20180426162433267][]

![Image 1][]

## 2、一对多连接查询，查询结果与数据库不匹配？ ##

**使用collection一对多连接查询，五表连接取部分字段，最好给查出来的列取别名，对应resultMap的collection中的column值。**

[20180426153110820]: /images/20220526/80b42af3c3ea4b4f92355cc694641a81.png
[20180426162800799]: /images/20220526/923a9b4994ff423ba08f4d81b2216139.png
[Image 1]: 
[20180426162656728]: /images/20220526/14d3e61ac2e3413b99ea8bacb7630956.png
[20180426162709628]: /images/20220526/c1c773a9f91441709d66f08da37e6d4c.png
[20180426162719146]: /images/20220526/9fd94913a4b741c2851af0ee84c03d25.png
[20180426162619877]: /images/20220526/c544ca624b7740bc9a18534052a31ea2.png
[20180426162433267]: /images/20220526/72e3535257944b14b9363218102c3cf2.png