.antMatchers("/ll").access("@myServiceImpl.hasPermission(request,authentication)")
//正常
@PreAuthorize("@myServiceImpl.hasPermission(request,authentication)")
@RequestMapping("/test1")
public String test1(HttpServletRequest request) {
return "test1";
}//报错
EL1008E: Property or field 'request' cannot be found on object of type 'org.springframework.security.access.expression.method.MethodSecurityExpressionRoot' - maybe not public or not valid?
这是判断逻辑;
public boolean hasPermission(HttpServletRequest request, Authentication authentication) {
Object obj = authentication.getPrincipal();
if (obj instanceof UserDetails) {
UserDetails user = (UserDetails) obj;
Collection<? extends GrantedAuthority> authorities = user.getAuthorities();
return authorities.contains(new SimpleGrantedAuthority(request.getRequestURI()));
}
return false;
}
版权声明:本文内容由阿里云实名注册用户自发贡献,版权归原作者所有,阿里云开发者社区不拥有其著作权,亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容,填写侵权投诉表单进行举报,一经查实,本社区将立刻删除涉嫌侵权内容。
<p>已解决;需要用#来获取方法参数;如</p>
@PreAuthorize("@myServiceImpl.hasPermission(#request,#authentication)")