shiro提供了jsp標(biāo)簽用于頁面上的權(quán)限控制撼泛，有hasAnyRoles,hasPermission等標(biāo)簽叔营，但是卻沒提供hasAnyPermission標(biāo)簽鸿吆，有點不大方便雷滚。

這時候我們完全可以仿照shiro的源碼钙态，進行照貓畫虎慧起，擴充一下。

shiro的標(biāo)簽定義文件在shiro-all.jar下的META-INF目錄下的shiro.tld中册倒，打開文件后我們可以看到如下標(biāo)簽的定義：

[html] view plain copy

<embed id="ZeroClipboardMovie_1" src="https://csdnimg.cn/public/highlighter/ZeroClipboard.swf" loop="false" menu="false" quality="best" bgcolor="#ffffff" name="ZeroClipboardMovie_1" allowscriptaccess="always" allowfullscreen="false" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" flashvars="id=1&width=16&height=16" wmode="transparent" width="16" height="16" align="middle">

1. <taglib>
2. <tlib-version>1.1.2</tlib-version>
3. <jsp-version>1.2</jsp-version>
4. <short-name>Apache Shiro</short-name>
5. <uri>http://shiro.apache.org/tags</uri>
6. <description>Apache Shiro JSP Tag Library.</description>
7. <tag>
8. <name>hasPermission</name>
9. <tag-class>org.apache.shiro.web.tags.HasPermissionTag</tag-class>
10. <body-content>JSP</body-content>
11. <description>Displays body content only if the current Subject (user)
12. 'has' (implies) the specified permission (i.e the user has the specified ability).
13. </description>
14. <attribute>
15. <name>name</name>
16. <required>true</required>
17. <rtexprvalue>true</rtexprvalue>
18. </attribute>
19. </tag>
20. <tag>
21. <name>hasAnyRoles</name>
22. <tag-class>org.apache.shiro.web.tags.HasAnyRolesTag</tag-class>
23. <body-content>JSP</body-content>
24. <description>Displays body content only if the current user has one of the specified roles from a
25. comma-separated list of role names.
26. </description>
27. <attribute>
28. <name>name</name>
29. <required>true</required>
30. <rtexprvalue>true</rtexprvalue>
31. </attribute>
32. </tag>
33. </taglib>

該文件中定義了每個標(biāo)簽的名字和相應(yīng)的標(biāo)簽的實現(xiàn)類蚓挤。我們要補充一個hasAnyPermission的標(biāo)簽，該標(biāo)簽的邏輯和hasAnyRoles有些類似驻子。我們先打開hasAnyRoles的實現(xiàn)類看看灿意，然后照貓畫虎做一個hasAnyPermission的標(biāo)簽。

[java] view plain copy

<embed id="ZeroClipboardMovie_2" src="https://csdnimg.cn/public/highlighter/ZeroClipboard.swf" loop="false" menu="false" quality="best" bgcolor="#ffffff" name="ZeroClipboardMovie_2" allowscriptaccess="always" allowfullscreen="false" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" flashvars="id=2&width=16&height=16" wmode="transparent" width="16" height="16" align="middle">

1. package org.apache.shiro.web.tags;
2. import org.apache.shiro.subject.Subject;
3. public class HasAnyRolesTag extends RoleTag {
4. private static final String ROLE_NAMES_DELIMETER = ",";
5. public HasAnyRolesTag() {
6. }
7. protected boolean showTagBody(String roleNames) {
8. boolean hasAnyRole = false;
9. Subject subject = getSubject();
10. if (subject != null) {
11. for (String role : roleNames.split(ROLE_NAMES_DELIMETER)) {
12. if (subject.hasRole(role.trim())) {
13. hasAnyRole = true;
14. break;
15. }
16. }
17. }
18. return hasAnyRole;
19. }
20. }

以上是hasAnyRolesTag的實現(xiàn)類崇呵，我們仿照這個實現(xiàn)hasAnyPermission:

[java] view plain copy

<embed id="ZeroClipboardMovie_3" src="https://csdnimg.cn/public/highlighter/ZeroClipboard.swf" loop="false" menu="false" quality="best" bgcolor="#ffffff" name="ZeroClipboardMovie_3" allowscriptaccess="always" allowfullscreen="false" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" flashvars="id=3&width=16&height=16" wmode="transparent" width="16" height="16" align="middle">

1. package org.apache.shiro.web.tags;
2. import org.apache.shiro.subject.Subject;
3. public class HasAnyPermissionTag extends PermissionTag {
4. private static final long serialVersionUID = 1L;
5. private static final String PERMISSION_NAMES_DELIMETER = ",";
6. public HasAnyPermissionTag() {
7. }
8. @Override
9. protected boolean showTagBody(String permissions) {
10. boolean hasAnyPermission = false;
11. Subject subject = getSubject();
12. if (subject != null) {
13. for (String permission : permissions
14. .split(PERMISSION_NAMES_DELIMETER)) {
15. if (subject.isPermitted(permission.trim())) {
16. hasAnyPermission = true;
17. break;
18. }
19. }
20. }
21. return hasAnyPermission;
22. }
23. }

將該源代碼編譯成class字節(jié)碼文件缤剧，扔進jar包的\org\apache\shiro\web\tags目錄下
并在jar包里的shiro.tld文件中加入以下代碼指定標(biāo)簽：

[html] view plain copy

<embed id="ZeroClipboardMovie_4" src="https://csdnimg.cn/public/highlighter/ZeroClipboard.swf" loop="false" menu="false" quality="best" bgcolor="#ffffff" name="ZeroClipboardMovie_4" allowscriptaccess="always" allowfullscreen="false" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" flashvars="id=4&width=16&height=16" wmode="transparent" width="16" height="16" align="middle">

1. <tag>
2. <name>hasAnyPermission</name>
3. <tag-class>org.apache.shiro.web.tags.HasAnyPermissionTag</tag-class>
4. <body-content>JSP</body-content>
5. <description>Displays body content only if the current Subject (user)
6. 'has' (implies) one of the specified permission (i.e the user has the specified ability) form a list of permissions.
7. </description>
8. <attribute>
9. <name>name</name>
10. <required>true</required>
11. <rtexprvalue>true</rtexprvalue>
12. </attribute>
13. </tag>

OK，搞定域慷，到頁面上測試一下：

[html] view plain copy

<embed id="ZeroClipboardMovie_5" src="https://csdnimg.cn/public/highlighter/ZeroClipboard.swf" loop="false" menu="false" quality="best" bgcolor="#ffffff" name="ZeroClipboardMovie_5" allowscriptaccess="always" allowfullscreen="false" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" flashvars="id=5&width=16&height=16" wmode="transparent" width="16" height="16" align="middle">

1. <shiro:hasAnyPermission name="sys_config:policy,
2. sys_config:server,
3. sys_config:logdown,
4. sys_config:keyword,
5. sys_config:audit,
6. sys_config:sysinfo">
7. <li id="4"><a href="javascript:changeMainMenu(4)"><i class="tables"></i>系統(tǒng)配置</a></li>
8. </shiro:hasAnyPermission>

表示如果當(dāng)前用戶擁有以下權(quán)限的任何一個權(quán)限荒辕，那么該菜單就會顯示汗销，好的，可以了抵窒。

收工弛针。