.antMatchers("/ll").access("@myServiceImpl.hasPermission(request,authentication)") //正常
@PreAuthorize("@myServiceImpl.hasPermission(request,authentication)") @RequestMapping("/test1") public String test1(HttpServletRequest request) { return "test1"; }//报错
EL1008E: Property or field 'request' cannot be found on object of type 'org.springframework.security.access.expression.method.MethodSecurityExpressionRoot' - maybe not public or not valid?
这是判断逻辑;
public boolean hasPermission(HttpServletRequest request, Authentication authentication) { Object obj = authentication.getPrincipal(); if (obj instanceof UserDetails) { UserDetails user = (UserDetails) obj; Collection<? extends GrantedAuthority> authorities = user.getAuthorities(); return authorities.contains(new SimpleGrantedAuthority(request.getRequestURI())); } return false; }
<p>已解决;需要用#来获取方法参数;如</p>
@PreAuthorize("@myServiceImpl.hasPermission(#request,#authentication)")
版权声明:本文内容由阿里云实名注册用户自发贡献,版权归原作者所有,阿里云开发者社区不拥有其著作权,亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容,填写侵权投诉表单进行举报,一经查实,本社区将立刻删除涉嫌侵权内容。