权限菜单的显示

MVC框架：struts2 + spring + hibernate

实现功能：后台管理系统中，每个登录的用户，有多个不同的角色，而每个角色都有不同的权限，针对每个用户所拥有的权限列表，根据其中菜单权限的等级进行划分归类，显示在操作菜单栏中。

菜单结构如下：

权限表设计如下：

       涉及的实体有部门、用户、角色及权限 ，部门-用户 是一对多关系，用户-角色是多对多关系，角色-权限也是多对多关系。在权限表中，权限等级取值可以是 1 、2、3，分别代表一级菜单、二级菜单、三级菜单，父级权限编号可以找到父级权限 ，一级菜单的父级权限默认是0，通过查询这个字段也可以找出某个菜单的子一级菜单列表。

通过这样的设计，就可以在用户登录后，获取用户拥有的所有角色，再根据每个角色拥有的权限进行汇总筛选，去除掉角色之间可能重复的权限，组合成分层次的权限结构，最后返回到页面中，根据权限等级划分层次显示即可。

以下是实体类的代码：

import java.util.List;
import javax.persistence.*;
import org.hibernate.annotations.GenericGenerator;
import com.ylzinfo.psBusiness.app.entity.power.JGInfo;
import com.ylzinfo.psBusiness.app.entity.power.Role;
@Entity
@Table(name="SYS_USER")
public class User {private String userid; // 用户ID（关键字）private String username; // 用户名（用户登录时的用户名 请确保登录名唯一）private String passwd; // 密码private String realname; // 真实姓名private String createtime; // 注册时间private String lastlogontime;// 上次登陆时间private String lockstate; // 账户锁定状态：0正常，1账户停用private String loginedcount; // 已登陆次数private String remark; // 备注private JGInfo baz001;//所属部门private String email;//邮箱地址private String reset_pw;//重置密码验证码（格式：验证码_有效时间）private List<Role> roles;//角色列表public User() {super();}@Id@GeneratedValue(generator = "paymentableGenerator")  @GenericGenerator(name = "paymentableGenerator", strategy = "uuid")public String getUserid() {return userid;}public void setUserid(String userid) {this.userid = userid;}@Column(name="username")public String getUsername() {return username;}public void setUsername(String username) {this.username = username;}@Column(name="passwd")public String getPasswd() {return passwd;}public void setPasswd(String passwd) {this.passwd = passwd;}@Column(name="realname")public String getRealname() {return realname;}public void setRealname(String realname) {this.realname = realname;}@Column(name="createtime")public String getCreatetime() {return createtime;}public void setCreatetime(String createtime) {this.createtime = createtime;}@Column(name="lastlogontime")public String getLastlogontime() {return lastlogontime;}public void setLastlogontime(String lastlogontime) {this.lastlogontime = lastlogontime;}@Column(name="lockstate")public String getLockstate() {return lockstate;}public void setLockstate(String lockstate) {this.lockstate = lockstate;}@Column(name="loginedcount")public String getLoginedcount() {return loginedcount;}public void setLoginedcount(String loginedcount) {this.loginedcount = loginedcount;}@Column(name="remark")public String getRemark() {return remark;}public void setRemark(String remark) {this.remark = remark;}@Column(name="email")public String getEmail() {return email;}public void setEmail(String email) {this.email = email;}@Column(name="reset_pw")public String getReset_pw() {return reset_pw;}public void setReset_pw(String resetPw) {reset_pw = resetPw;}@ManyToOne(fetch = FetchType.LAZY)@JoinColumn(name = "baz001")public JGInfo getBaz001() {return baz001;}public void setBaz001(JGInfo baz001) {this.baz001 = baz001;}@ManyToMany(targetEntity = Role.class, fetch = FetchType.LAZY)  @JoinTable(name = "USER_ROLE", joinColumns = @JoinColumn(name = "USER_ID"), inverseJoinColumns = @JoinColumn(name = "ROLE_ID")) public List<Role> getRoles() {return roles;}public void setRoles(List<Role> roles) {this.roles = roles;}}

import java.io.Serializable;
import java.util.Date;
import java.util.List;
import javax.persistence.*;
import org.hibernate.annotations.GenericGenerator;@Entity
@Table(name="SYS_ROLE")
public class Role implements Serializable{/*** */private static final long serialVersionUID = 1L;private String role_id;//角色IDprivate String role_name;//角色名称private Date cre_time;//创建时间private String parent_id;//父级角色IDprivate String describe;//描述private int sort;//排序序号private List<Right> rights;//角色的权限列表@Id@GeneratedValue(generator = "paymentableGenerator")  @GenericGenerator(name = "paymentableGenerator", strategy = "uuid")public String getRole_id() {return role_id;}public void setRole_id(String roleId) {role_id = roleId;}@Column(name="role_name")public String getRole_name() {return role_name;}public void setRole_name(String roleName) {role_name = roleName;}@Column(name="cre_time")public Date getCre_time() {return cre_time;}public void setCre_time(Date creTime) {cre_time = creTime;}@Column(name="parent_id")public String getParent_id() {return parent_id;}public void setParent_id(String parentId) {parent_id = parentId;}@Column(name="describe")public String getDescribe() {return describe;}public void setDescribe(String describe) {this.describe = describe;}@Column(name="sort")public int getSort() {return sort;}public void setSort(int sort) {this.sort = sort;}@ManyToMany(targetEntity = Right.class, fetch = FetchType.LAZY)  @JoinTable(name = "ROLE_RIGHT", joinColumns = @JoinColumn(name = "ROLE_ID"), inverseJoinColumns = @JoinColumn(name = "RIGHT_ID"))  public List<Right> getRights() {return rights;}public void setRights(List<Right> rights) {this.rights = rights;}@Overridepublic String toString() {return "Role [cre_time=" + cre_time + ", describe=" + describe+ ", parent_id=" + parent_id + ", role_id=" + role_id+ ", role_name=" + role_name + ", sort=" + sort + "]";}@Overridepublic boolean equals(Object obj) {// TODO Auto-generated method stubif(obj.getClass() == this.getClass()){if(this.getRole_id().equals(((Role)obj).getRole_id()))return true;elsereturn false;}return super.equals(obj);}}

import java.io.Serializable;
import java.util.ArrayList;
import java.util.List;import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.GeneratedValue;
import javax.persistence.Id;
import javax.persistence.Table;
import javax.persistence.Transient;import org.hibernate.annotations.GenericGenerator;@Entity
@Table(name="SYS_RIGHTS")
public class Right implements Serializable{/*** */private static final long serialVersionUID = 1L;private String right_id;//权限IDprivate String right_name;//权限名称private String url;//权限URLprivate String resource_path;//权限图片显示资源路径(可选)private String parent_id;//父级权限IDprivate String describe;//描述private int lev;//权限等级private Integer sort; //排序序号private List<Right> rights;public Right(){rights = new ArrayList();}@Id@GeneratedValue(generator = "paymentableGenerator")  @GenericGenerator(name = "paymentableGenerator", strategy = "uuid")public String getRight_id() {return right_id;}public void setRight_id(String rightId) {right_id = rightId;}@Column(name="right_name")public String getRight_name() {return right_name;}public void setRight_name(String rightName) {right_name = rightName;}@Column(name="url")public String getUrl() {return url;}public void setUrl(String url) {this.url = url;}@Column(name="resource_path")public String getResource_path() {return resource_path;}public void setResource_path(String resourcePath) {resource_path = resourcePath;}@Column(name="parent_id")public String getParent_id() {return parent_id;}public void setParent_id(String parentId) {parent_id = parentId;}@Column(name="describe")public String getDescribe() {return describe;}public void setDescribe(String describe) {this.describe = describe;}@Column(name="lev")public int getLev() {return lev;}public void setLev(int lev) {this.lev = lev;}//@Transient表示该属性并非一个到数据库表的字段的映射,ORM框架将忽略该属性@Transientpublic List<Right> getRights() {return rights;}public void setRights(List<Right> rights) {this.rights = rights;}@Column(name="sort")public Integer getSort() {return sort;}public void setSort(Integer sort) {this.sort = sort;}@Overridepublic String toString() {return "Right [describe=" + describe + ", lev=" + lev + ", parent_id="+ parent_id + ", resource_path=" + resource_path+ ", right_id=" + right_id + ", right_name=" + right_name+ ", url=" + url + "]";}public boolean equals(Right obj) {// TODO Auto-generated method stubif(this.right_id.equals(obj.getRight_id()))return true;elsereturn false;}}

最后是系统确认用户名及密码正确后，需要执行的操作，即加载及筛选合适的权限列表的核心算法。

public void initPower(){//初始化一级菜单List<Role> rlist = user.getRoles();   //获取用户的所有角色List<Right> rightList = new ArrayList();//初始化返回到页面的权限List//遍历每一个角色，并获取每个角色拥有的一级菜单保存到权限列表中for(Role role : rlist){List<Right> rights = role.getRights();for(Right rig : rights){if(rig.getLev() == 1){if(!rightList.contains(rig))rightList.add(rig);}}}//初始化二级菜单//同样遍历角色列表，拿出所有角色的二级子权限放入列表for(Role role : rlist){List<Right> rights = role.getRights();for(Right rig : rights){if(rig.getLev() == 2){for(Right rig2 : rightList){if(rig.getParent_id().equals(rig2.getRight_id())){if(!rig2.getRights().contains(rig))rig2.getRights().add(rig);}}}}}//初始化三级菜单//再次遍历角色列表获取所有三级子权限放入到权限列表中for(Role role : rlist){List<Right> rights = role.getRights();for(Right rig : rights){if(rig.getLev() == 3){for(Right rig2 : rightList){for(Right rig3 : rig2.getRights()){if(rig.getParent_id().equals(rig3.getRight_id())){if(!rig3.getRights().contains(rig))rig3.getRights().add(rig);}}}}}}//根据Right类的sort字段将一级菜单列表由小到大进行排序Collections.sort(rightList, new ComparatorRight());for(Right right:rightList){//对每个一级菜单的二级子菜单进行排序Collections.sort(right.getRights(),new ComparatorRight());for(Right right2:right.getRights()){//对每个二级菜单的三级子菜单进行排序Collections.sort(right2.getRights(),new ComparatorRight());}}//将用户所拥有的菜单权限列表保存到Session中request.getSession().setAttribute("rights", rightList);}