springmvc + shiro 整合，shiro注解无效 ： 配置报错 

错误：

严重: Servlet.service() for servlet [springConfig] in context with path [] threw exception [Request processing failed; nested exception is org.apache.shiro.authz.UnauthorizedException: Subject does not have permission [teacher:select]] with root cause
org.apache.shiro.authz.AuthorizationException: Not authorized to invoke method: public java.lang.String com.controller.PermissionController.per(javax.servlet.http.HttpServletRequest)
	at org.apache.shiro.authz.aop.AuthorizingAnnotationMethodInterceptor.assertAuthorized(AuthorizingAnnotationMethodInterceptor.java:90)
	at org.apache.shiro.authz.aop.AnnotationsAuthorizingMethodInterceptor.assertAuthorized(AnnotationsAuthorizingMethodInterceptor.java:100)

sping-shiro.xml  只贴了shiro的配置内容

<!-- 自定义realm -->
        <bean name="securityRealm" class="com.realm.BaseRealm"/>

        <!-- 安全管理器 -->
        <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
            <property name="realm" ref="securityRealm"/>
        </bean>
        <!-- Shiro过滤器 -->
            <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
                <!-- Shiro的核心安全接口,这个属性是必须的 -->
                <property name="securityManager" ref="securityManager"/>
                <!-- 身份认证失败，则跳转到登录页面的配置 -->
                 <property name="loginUrl" value="/index.jsp"/>
                <!-- 权限认证失败，则跳转到指定页面 -->
                <property name="unauthorizedUrl" value="/401.jsp"/>
                <!-- Shiro连接约束配置,即过滤链的定义 -->
                <property name="filterChainDefinitions">
                     <value>
                         /login=anon
                         /** = authc
                    </value>
                </property>
            </bean>

            <aop:aspectj-autoproxy proxy-target-class="true"/>
            <!-- 保证实现了Shiro内部lifecycle函数的bean执行 -->
            <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>

mvc.xml

<!--开启注解驱动 -->
    <mvc:annotation-driven />
    <!-- 自动扫描controller包下的所有类，使其认为是spring mvc的控制器 -->
    <context:component-scan base-package="com.controller"/>

    <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
        <!-- 对模型视图名称的解析，即在模型视图名称添加前后缀 -->
        <property name="prefix" value="/WEB-INF/pages/"/>
    </bean>

    <!-- shiro 注解 -->
    <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor">
        <property name="proxyTargetClass" value="true" />
    </bean>

    <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
        <property name="securityManager" ref="securityManager"/>
    </bean>

controller

    @RequestMapping("/per")
    @RequiresPermissions("teacher:select")
    public String per(HttpServletRequest request){
        request.setAttribute("message","hello");
        return "hello.jsp";
    }

登入的是admin，权限是充足的。。