/**

* 发送ajax请求,执行退出

* @return

*/

@RequestMapping("ajaxLogout")

@ResponseBody

public int ajaxLogout(){

SecurityUtils.getSubject().logout();

System.out.println("执行退出");

return 0;

}

public class MyValidateCodeFilter extends AuthenticationFilter{

@Override

protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {

String validateCode = request.getParameter("validateCode");

Object obj = ((HttpServletRequest)request).getSession().getAttribute("validateCode");

System.out.println("obj:"+obj);

System.out.println("validateCode:"+validateCode);

if(!validateCode.equals(obj.toString())){

System.out.println("阻止了");

response.setContentType("application/json;charset=utf-8");

PrintWriter out = response.getWriter();

out.print("5");

return false;

}

return true;

}

}

<bean id="myValidateCodeFilter" class="com.bjsxt.manage.filter.MyValidateCodeFilter"></bean>

<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">

<property name="securityManager" ref="securityManager"></property>

<property name="filters">

       <map>

          <entry key="validateCodeFilter" value-ref="myValidateCodeFilter"></entry>

       </map>

    </property>

<property name="loginUrl" value="/login"></property>

<property name="successUrl" value="/loginSuccess"></property>

<property name="filterChainDefinitions">

<value>

/login=validateCodeFilter,authc

/**=anon

</value>

</property>

</bean>

<%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %>

<shiro:hasRole name="管理员">

<a id="btn" href="#" class="easyui-linkbutton" data-options="iconCls:'icon-search'">注册新用户</a>

</shiro:hasRole>

@RequiresRoles("")

protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {

// TODO Auto-generated method stub

//

//    SecurityUtils.getSubject().hasRole("");

//    SecurityUtils.getSubject().isPermitted("")

Users user = (Users) principals.getPrimaryPrincipal();

SimpleAuthorizationInfo info= new SimpleAuthorizationInfo();

List<Role> list = user.getRoles();

for (Role role : list) {

System.out.println(role.getName());

info.addRole(role.getName());

}

//    info.addStringPermission(permission);

return info;

}