|
|
@@ -175,9 +175,15 @@ public class SSOInterceptor extends AbstractSSOInterceptor {
|
|
|
private void accessDecision(HttpServletRequest request, User user) {
|
|
|
//判断当前访问是否有权限限制
|
|
|
Collection<ConfigAttribute> configAttributes = getAttributes(request);
|
|
|
+ String resourceUrl = request.getServletPath();
|
|
|
+ if (request.getPathInfo() != null) {
|
|
|
+ resourceUrl = resourceUrl + request.getPathInfo();
|
|
|
+ }
|
|
|
+ logger.info("【"+user.getUserUU()+"当前访问路径】:*******"+"resourceUrl:"+resourceUrl);
|
|
|
if (null == configAttributes || configAttributes.size() == 0 || user.isSys() || user.getEnterprise() == null) {
|
|
|
return;
|
|
|
}
|
|
|
+ logger.info("【"+user.getUserUU()+"当前资源的权限】:*******"+"configAttributes:"+FastjsonUtils.toJson(configAttributes));
|
|
|
Iterator<ConfigAttribute> iterator = configAttributes.iterator();
|
|
|
String needPermission = null;
|
|
|
if (null == authorities || !authorities.containsKey(user.getUserUU())) {
|
|
|
@@ -185,6 +191,7 @@ public class SSOInterceptor extends AbstractSSOInterceptor {
|
|
|
}
|
|
|
//获取当前登录用户的所有权限;
|
|
|
Collection<GrantedAuthority> userAuthorities = authorities.get(user.getUserUU());
|
|
|
+ logger.info("【"+user.getUserUU()+"用户所有权限】:*******"+"userAuthorities:"+FastjsonUtils.toJson(userAuthorities));
|
|
|
//匹配当前访问权限;
|
|
|
while (iterator.hasNext()) {
|
|
|
ConfigAttribute configAttribute = iterator.next();
|