详解spring整合shiro权限管理与数据库设计

之前的文章中我们完成了基础框架的搭建，现在基本上所有的后台系统都逃不过权限管理这一块，这算是一个刚需了。现在我们来集成shiro来达到颗粒化权限管理，也就是从连接菜单到页面功能按钮，都进行权限都验证，从前端按钮的显示隐藏，到后台具体功能方法的权限验证。

首先要先设计好我们的数据库，先来看一张比较粗糙的数据库设计图：

具体的数据库设计代码

/*
Navicat MySQL Data Transfer

Source Server     : 本机
Source Server Version : 50537
Source Host      : localhost:3306
Source Database    : task

Target Server Type  : MYSQL
Target Server Version : 50537
File Encoding     : 65001

Date: 2017-01-19 09:58:27
*/

SET FOREIGN_KEY_CHECKS=0;

-- ----------------------------
-- Table structure for sys_authority
-- ----------------------------
DROP TABLE IF EXISTS `sys_authority`;
CREATE TABLE `sys_authority` (
 `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT '主键',
 `data_url` varchar(100) NOT NULL COMMENT '连接路径或方法',
 `menu_class` varchar(50) NOT NULL COMMENT '菜单样式',
 `menu_code` varchar(50) NOT NULL COMMENT '菜单编码',
 `menu_name` varchar(50) NOT NULL COMMENT '菜单名称',
 `parent_menucode` varchar(50) DEFAULT NULL COMMENT '上级菜单编码',
 `sequence` bigint(20) DEFAULT '0' COMMENT '排序',
 `menu_type` varchar(2) DEFAULT '1' COMMENT '菜单类型(1是左导航菜单 2是按钮权限)',
 `create_time` varchar(30) NOT NULL COMMENT '创建时间',
 PRIMARY KEY (`id`),
 UNIQUE KEY `uk_sys_authority_menu_code` (`menu_code`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='菜单表';

-- ----------------------------
-- Records of sys_authority
-- ----------------------------

-- ----------------------------
-- Table structure for sys_department
-- ----------------------------
DROP TABLE IF EXISTS `sys_department`;
CREATE TABLE `sys_department` (
 `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT '主键',
 `department_key` varchar(20) NOT NULL COMMENT '部门编码',
 `department_value` varchar(40) NOT NULL COMMENT '部门名称',
 `description` varchar(200) DEFAULT NULL COMMENT '描述',
 `parent_departmentkey` varchar(20) DEFAULT NULL COMMENT '上级部门编码',
 `create_time` varchar(30) DEFAULT NULL COMMENT '创建时间',
 PRIMARY KEY (`id`),
 UNIQUE KEY `uk_sys_department_department_key` (`department_key`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='部门表';

-- ----------------------------
-- Records of sys_department
-- ----------------------------

-- ----------------------------
-- Table structure for sys_role
-- ----------------------------
DROP TABLE IF EXISTS `sys_role`;
CREATE TABLE `sys_role` (
 `role_id` int(11) NOT NULL AUTO_INCREMENT COMMENT '主键',
 `role_key` varchar(30) DEFAULT NULL COMMENT '角色编码',
 `create_time` varchar(30) DEFAULT NULL COMMENT '创建时间',
 `description` varchar(200) DEFAULT NULL COMMENT '描述',
 `role_value` varchar(40) NOT NULL COMMENT '角色名称',
 `company_id` bigint(20) DEFAULT NULL,
 PRIMARY KEY (`role_id`)
) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8 COMMENT='角色表';

-- ----------------------------
-- Records of sys_role
-- ----------------------------
INSERT INTO `sys_role` VALUES ('1', 'ROLE_USER', null, null, '', null);
INSERT INTO `sys_role` VALUES ('2', 'ROLE_ADMIN', null, null, '', null);

-- ----------------------------
-- Table structure for sys_role_authority
-- ----------------------------
DROP TABLE IF EXISTS `sys_role_authority`;
CREATE TABLE `sys_role_authority` (
 `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT '主键编号自增长',
 `menu_code` varchar(50) NOT NULL COMMENT '菜单编码',
 `role_key` varchar(40) NOT NULL COMMENT '角色编码',
 `menu_type` int(11) DEFAULT NULL COMMENT '菜单类型 1 导航 2 按钮',
 PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='角色菜单表';

-- ----------------------------
-- Records of sys_role_authority
-- ----------------------------

-- ----------------------------
-- Table structure for sys_role_permission
-- ----------------------------
DROP TABLE IF EXISTS `sys_role_permission`;
CREATE TABLE `sys_role_permission` (
 `role_id` int(11) NOT NULL COMMENT '角色主键编号',
 `permissions` varchar(1000) DEFAULT NULL COMMENT '按钮权限',
 KEY `FK9q28ewrhntqeipl1t04kh1be7` (`role_id`),
 CONSTRAINT `FK9q28ewrhntqeipl1t04kh1be7` FOREIGN KEY (`role_id`) REFERENCES `sys_role` (`role_id`),
 CONSTRAINT `fk_sys_role_permission_role_id` FOREIGN KEY (`role_id`) REFERENCES `sys_role` (`role_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='角色按钮权限表';

-- ----------------------------
-- Records of sys_role_permission
-- ----------------------------

-- ----------------------------
-- Table structure for sys_user
-- ----------------------------
DROP TABLE IF EXISTS `sys_user`;
CREATE TABLE `sys_user` (
 `user_id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT '主键',
 `login_account` varchar(30) NOT NULL COMMENT '登录账号',
 `login_pass` varchar(65) NOT NULL COMMENT '登录密码',
 `user_name` varchar(20) DEFAULT NULL COMMENT '昵称',
 `user_head` varchar(30) DEFAULT NULL COMMENT '头像',
 `user_phone` varchar(20) DEFAULT NULL COMMENT '手机',
 `user_email` varchar(30) DEFAULT NULL COMMENT '邮箱',
 `user_sex` int(11) DEFAULT NULL COMMENT '性别',
 `user_birthday` varchar(30) DEFAULT NULL COMMENT '生日',
 `register_time` varchar(30) NOT NULL COMMENT '注册时间',
 `department_key` varchar(20) DEFAULT NULL COMMENT '部门编码',
 PRIMARY KEY (`user_id`),
 UNIQUE KEY `uk_sys_user_login_account` (`login_account`)
) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8 COMMENT='用户表';

-- ----------------------------
-- Records of sys_user
-- ----------------------------
INSERT INTO `sys_user` VALUES ('2', 'hzw2312', '63cbbfefc6a5f389ea64299134e989a9a378d1293cad8b5623331bf5d0e023a9', null, null, null, 'hzw2312@sina.com', null, null, '2017-01-18 14:39:23', null);
INSERT INTO `sys_user` VALUES ('3', 'hzw2312f', '63cbbfefc6a5f389ea64299134e989a9a378d1293cad8b5623331bf5d0e023a9', null, null, null, 'hzw23d12@sina.com', null, null, '2017-01-18 15:25:08', null);
INSERT INTO `sys_user` VALUES ('4', 'hhsykx', '63cbbfefc6a5f389ea64299134e989a9a378d1293cad8b5623331bf5d0e023a9', null, null, null, 'hhs2312@sina.com', null, null, '2017-01-18 15:25:47', null);

-- ----------------------------
-- Table structure for sys_user_role
-- ----------------------------
DROP TABLE IF EXISTS `sys_user_role`;
CREATE TABLE `sys_user_role` (
 `user_id` bigint(20) NOT NULL COMMENT '用户编号',
 `role_id` int(20) NOT NULL COMMENT '角色编号',
 PRIMARY KEY (`user_id`,`role_id`),
 KEY `FKhh52n8vd4ny9ff4x9fb8v65qx` (`role_id`),
 CONSTRAINT `FKb40xxfch70f5qnyfw8yme1n1s` FOREIGN KEY (`user_id`) REFERENCES `sys_user` (`user_id`),
 CONSTRAINT `FKhh52n8vd4ny9ff4x9fb8v65qx` FOREIGN KEY (`role_id`) REFERENCES `sys_role` (`role_id`),
 CONSTRAINT `fk_sys_user_role_role_id` FOREIGN KEY (`role_id`) REFERENCES `sys_role` (`role_id`),
 CONSTRAINT `fk_sys_user_role_user_id` FOREIGN KEY (`user_id`) REFERENCES `sys_user` (`user_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='用户角色映射表';

-- ----------------------------
-- Records of sys_user_role
-- ----------------------------
INSERT INTO `sys_user_role` VALUES ('3', '1');
INSERT INTO `sys_user_role` VALUES ('4', '1');
INSERT INTO `sys_user_role` VALUES ('2', '2');

下面我们开始根据之前的框架集成shiro

首先在pom.xml添加shiro的支持，先在properties中声明一下要倒入的版本：

<properties>
  <shiro.version>1.3.2</shiro.version>
  <commons-logging.version>1.2</commons-logging.version>
</properties> 

然后在是dependency的添加：

<!-- shiro权限 -->
    <dependency>
      <groupId>org.apache.shiro</groupId>
      <artifactId>shiro-all</artifactId>
      <version>${shiro.version}</version>
    </dependency> 

    <!-- commons-logging -->
    <dependency>
      <groupId>commons-logging</groupId>
      <artifactId>commons-logging</artifactId>
      <version>${commons-logging.version}</version>
    </dependency>

下面是shiro的配置跟spring配置放在同级目录spring-shiro.xml：

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:util="http://www.springframework.org/schema/util"
    xmlns:aop="http://www.springframework.org/schema/aop"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="
    http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
    http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd
    http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop.xsd"> 

  <!-- 缓存管理器 使用Ehcache实现 -->
  <bean id="cacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
    <property name="cacheManagerConfigFile" value="classpath:ehcache-shiro.xml" />
  </bean> 

  <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    <!--认证管理器-->
    <property name="realm" ref="shiroSecurityRealm" />
    <!-- 缓存管理器 -->
    <property name="cacheManager" ref="cacheManager" />
    <!-- rememberMe管理器 -->
    <property name="rememberMeManager" ref="rememberMeManager"/>
  </bean>
  <!-- 会话ID生成器 -->
  <bean id="sessionIdGenerator" class="org.apache.shiro.session.mgt.eis.JavaUuidSessionIdGenerator"/> 

  <!-- 会话Cookie模板 -->
  <bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
    <constructor-arg value="sid"/>
    <property name="httpOnly" value="true"/>
    <property name="maxAge" value="-1"/>
  </bean> 

  <bean id="rememberMeCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
    <constructor-arg value="rememberMe"/>
    <property name="httpOnly" value="true"/>
    <property name="maxAge" value="2592000"/><!-- 30天 -->
  </bean>
  <!-- rememberMe管理器 -->
  <bean id="rememberMeManager"
    class="org.apache.shiro.web.mgt.CookieRememberMeManager">
    <property name="cipherKey" value="#{T(org.apache.shiro.codec.Base64).decode('7gzYfKjTASKdsai43ds==')}"/>
     <property name="cookie" ref="rememberMeCookie"/>
  </bean> 

  <!-- 会话DAO -->
  <bean id="sessionDAO" class="org.apache.shiro.session.mgt.eis.EnterpriseCacheSessionDAO">
    <property name="activeSessionsCacheName" value="shiro-activeSessionCache"/>
    <property name="sessionIdGenerator" ref="sessionIdGenerator"/>
  </bean>
  <!-- 会话验证调度器 -->
  <bean id="sessionValidationScheduler" class="org.apache.shiro.session.mgt.quartz.QuartzSessionValidationScheduler">
    <property name="sessionValidationInterval" value="3000000"/>
    <property name="sessionManager" ref="sessionManager"/>
  </bean> 

  <!-- 会话管理器 -->
  <bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">
    <property name="globalSessionTimeout" value="3000000"/>
    <property name="deleteInvalidSessions" value="true"/>
    <property name="sessionValidationSchedulerEnabled" value="true"/>
    <property name="sessionValidationScheduler" ref="sessionValidationScheduler"/>
    <property name="sessionDAO" ref="sessionDAO"/>
    <property name="sessionIdCookieEnabled" value="true"/>
    <property name="sessionIdCookie" ref="sessionIdCookie"/>
  </bean> 

  <bean id="formAuthenticationFilter" class="org.apache.shiro.web.filter.authc.FormAuthenticationFilter">
    <property name="rememberMeParam" value="rememberMe"/>
  </bean> 

  <bean id="sysUserFilter" class="yfkj.gz.task.security.SysUserFilter"/> 

  <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    <property name="securityManager" ref="securityManager"/>
    <property name="loginUrl" value="/login.jsp"/>
    <property name="successUrl" value="/page/main.action"/>
    <property name="filters">
      <util:map>
        <entry key="authc">
          <bean class="org.apache.shiro.web.filter.authc.PassThruAuthenticationFilter"/>
        </entry>
        <entry key="sysUser" value-ref="sysUserFilter"/>
      </util:map>
    </property>
    <property name="filterChainDefinitions">
      <value>
        /static/** = anon
        /login.jsp = anon
        /sysuser/login.action = anon
        /sysuser/register.action = anon
        /sysuser/getEMailCount.action = anon
        /sysuser/getUserNameCount.action = anon
        /sysuser/logout.action = logout
        /** = user,sysUser <!-- 表示访问该地址的用户是身份验证通过或RememberMe登录的都可以 -->
        <!-- /** = authc 表示访问该地址用户必须身份验证通过-->
      </value>
    </property>
  </bean> 

  <!-- Post processor that automatically invokes init() and destroy() methods -->
  <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/> 

</beans>

上面的

/static/** = anon，/login.jsp = anon...这些等于anon的就是默认不做权限验证的，我们的登录，注册，静态资源等，不需要权限验证。

权限缓存的配置（如果不用缓存的话，每次请求都要去访问数据库查询权限）ehcache-shiro.xml：

<?xml version="1.0" encoding="UTF-8"?>
<ehcache name="shirocache"> 

  <diskStore path="java.io.tmpdir/yfkj-shiro-ehcache"/> 

  <!-- 默认缓存 -->
  <defaultCache maxElementsInMemory="1000" eternal="false"
    overflowToDisk="true" timeToIdleSeconds="300" timeToLiveSeconds="180"
    diskPersistent="false" diskExpiryThreadIntervalSeconds="120" /> 

  <!-- 登录记录缓存 -->
  <cache name="passwordRetryCache"
      maxEntriesLocalHeap="2000"
      eternal="false"
      timeToIdleSeconds="3600"
      timeToLiveSeconds="0"
      overflowToDisk="false"
      statistics="true">
  </cache> 

  <!-- 授权缓存 -->
  <cache name="authorizationCache"
      maxEntriesLocalHeap="2000"
      eternal="false"
      timeToIdleSeconds="3600"
      timeToLiveSeconds="0"
      overflowToDisk="false"
      statistics="true">
  </cache> 

  <!-- 认证缓存 -->
  <cache name="authenticationCache"
      maxEntriesLocalHeap="2000"
      eternal="false"
      timeToIdleSeconds="3600"
      timeToLiveSeconds="0"
      overflowToDisk="false"
      statistics="true">
  </cache> 

  <cache name="shiro-activeSessionCache"
      maxEntriesLocalHeap="2000"
      eternal="false"
      timeToIdleSeconds="3600"
      timeToLiveSeconds="0"
      overflowToDisk="false"
      statistics="true">
  </cache> 

  <cache name="shiro-kickout-session"
      maxEntriesLocalHeap="2000"
      eternal="false"
      timeToIdleSeconds="3600"
      timeToLiveSeconds="0"
      overflowToDisk="false"
      statistics="true">
  </cache> 

</ehcache>

自定义用户过滤类SysUserFilter：

import yfkj.gz.task.service.ISysUserService; 

import org.apache.shiro.web.filter.PathMatchingFilter; 

import javax.annotation.Resource;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse; 

/**
 * 自定义用户过滤器
 * @author 胡汉三
 *
 */
public class SysUserFilter extends PathMatchingFilter { 

  @Resource
  private ISysUserService sysUserService; 

  @Override
  protected boolean onPreHandle(ServletRequest request, ServletResponse response, Object mappedValue) throws Exception {
    //可以参考http://jinnianshilongnian.iteye.com/blog/2025656
    return true;
  }
}

权限认证类ShiroSecurityRealm：

import javax.annotation.Resource; 

import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.authc.credential.Sha256CredentialsMatcher;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.springframework.stereotype.Component; 

import yfkj.gz.task.dao.ISysUserDao;
import yfkj.gz.task.entity.SysRole;
import yfkj.gz.task.entity.SysUser;
import yfkj.gz.task.service.ISysUserService; 

/**
 * 权限认证
 * @author 胡汉三
 * @date  2017年1月19日 上午10:52:17
 */
@SuppressWarnings("deprecation")
@Component
public class ShiroSecurityRealm extends AuthorizingRealm { 

  @Resource
  private ISysUserService userService; 

  @Resource
  private ISysUserDao sysUserDao; 

  public ShiroSecurityRealm() {
    setName("ShiroSecurityRealm"); // This name must match the name in the SysUser class's getPrincipals() method
    setCredentialsMatcher(new Sha256CredentialsMatcher());
  } 

  /**
   * 登录认证
   */
  protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException {
    UsernamePasswordToken token = (UsernamePasswordToken) authcToken;
    SysUser user = userService.getByProerties(new String[]{"loginAccount"}, new String[]{token.getUsername()},null);
    if (user != null) {
      return new SimpleAuthenticationInfo(user.getUserId(), user.getLoginPass(), getName());
    } else {
      return null;
    }
  } 

  /**
   * 权限认证
   */
  protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    Long userId = (Long) principals.fromRealm(getName()).iterator().next();
    SysUser user = userService.get(userId);
    if (user != null) {
      SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
      for (SysRole role : user.getRoles()) {
        info.addRole(role.getRoleKey());
        info.addStringPermissions(role.getPermissions());
      }
      return info;
    } else {
      return null;
    }
  } 

}

在web.xml加入：

<!-- 加载spring配置文件 -->
  <context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>classpath:spring.xml,classpath:spring-hibernate.xml,classpath:spring-shiro.xml</param-value>
  </context-param> 

  <!-- shiro权限过滤器 -->
  <filter>
    <filter-name>shiroFilter</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    <init-param>
      <param-name>targetFilterLifecycle</param-name>
      <param-value>true</param-value>
    </init-param>
  </filter>
  <filter-mapping>
    <filter-name>shiroFilter</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>

在登录方法中加上权限的登录(构造方法参数：登录账号，登录密码，记住我)：

//存入session
    Subject subject = SecurityUtils.getSubject();
    //记得传入明文密码
    subject.login(new UsernamePasswordToken(userInfo.getLoginAccount(), user.getLoginPass(), rememberMe));
完整的登录方法：
[java] view plain copy 在CODE上查看代码片派生到我的代码片
/**
   * 用户登录
   * @param response
   * @param user
   * @throws IOException
   */
  @RequestMapping(value = "/login", method = { RequestMethod.POST, RequestMethod.GET })
  public void login(SysUser user,boolean rememberMe) throws IOException{
    //用户登录
    SysUser userInfo = userService.getByProerties(new String[]{"loginAccount"}, new String[]{user.getLoginAccount()},null);
    if(userInfo==null){
      result.setMessage("用户名错误");
      super.writeJSON(result);
      return;
    }
    if(!userInfo.getLoginPass().equals(new Sha256Hash(user.getLoginPass()).toHex())){
      result.setMessage("密码错误");
      super.writeJSON(result);
      return;
    }
    //存入session
    Subject subject = SecurityUtils.getSubject();
    //记得传入明文密码
    subject.login(new UsernamePasswordToken(userInfo.getLoginAccount(), user.getLoginPass(), rememberMe));
    session.setAttribute(USER_SESSION, userInfo);
    result.setMessage("登录成功");
    result.setSuccess(true);
    super.writeJSON(result);
  }

数据库也设计好啦，该整合的也整合了，怎么来实现呢，这里先说一点点，详细的等下一篇说：

jsp页面引入page指令：

<%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %> 

在要做验证的按钮上加上shiro标签的判断：

<shiro:hasPermission name="${ROLE_KEY}:role:role_add">
          <button id="btn_add" type="button" class="btn btn-default">
            <span class="glyphicon glyphicon-plus" aria-hidden="true"></span>新增
          </button>
          </shiro:hasPermission> 

${ROLE_KEY}:role:role_add的意思就是：

${ROLE_KEY}角色

role是指菜单(页面)

role_add指的功能

联合起来就是，当前角色在role菜单(页面)中有没有role_add新增的功能，如果有就会显示，没有就不显示这个按钮啦。

在后台方法中验证：

在对应的方法中加入代码：

Subject subject = SecurityUtils.getSubject();
subject.checkPermission(getCurrentRoleKey()+":role:role_add"); 

如果没有通过checkPermission，则会直接返回错误，不执行下面的代码啦。

实体Base类BaseEntity：

import java.io.Serializable;
import java.util.LinkedHashMap;
import java.util.Map; 

/**
 * 实体父类
 * @author 胡汉三
 * @date  2017年1月18日 上午11:03:11
 */
public class BaseEntity implements Serializable{ 

  /**
   *
   */
  private static final long serialVersionUID = 3730369554400423966L; 

  /**
   * 排序
   */
  private Map<String, String> sortedConditions = new LinkedHashMap<String, String>(); 

  public Map<String, String> getSortedConditions() {
    return sortedConditions;
  }
  public void setSortedConditions(Map<String, String> sortedConditions) {
    this.sortedConditions = sortedConditions;
  } 

}

用户实体SysUser：

import java.util.HashSet;
import java.util.Set; 

import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.FetchType;
import javax.persistence.GeneratedValue;
import javax.persistence.Id;
import javax.persistence.JoinTable;
import javax.persistence.JoinColumn;
import javax.persistence.ManyToMany;
import javax.persistence.Table; 

import org.hibernate.annotations.Cache;
import org.hibernate.annotations.CacheConcurrencyStrategy; 

import yfkj.gz.support.BaseEntity; 

/**
 * 用户的实体类
 */
@Entity
@Table(name = "sys_user")
public class SysUser extends BaseEntity{ 

  /**
   *
   */
  private static final long serialVersionUID = 2491111485758197830L; 

  /**主键**/
  @Id
  @GeneratedValue
  @Column(name = "user_id")
  private Long userId; 

  /**登录账号**/
  @Column(name = "login_account" ,length = 30 , unique = true )
  private String loginAccount; 

  /**登录密码**/
  @Column(name = "login_pass" ,length = 65)
  private String loginPass; 

  /**昵称**/
  @Column(name = "user_name" ,length = 20)
  private String userName; 

  /**头像**/
  @Column(name = "user_head" ,length = 30)
  private String userHead; 

  /**手机**/
  @Column(name = "user_phone" ,length = 20)
  private String userPhone; 

  /**邮箱**/
  @Column(name = "user_email" ,length = 30)
  private String userEmail; 

  /**性别**/
  @Column(name = "user_sex")
  private Integer userSex; 

  /**生日**/
  @Column(name = "user_birthday" ,length = 30)
  private String userBirthday; 

  /**注册时间**/
  @Column(name = "register_time" ,length = 30)
  private String registerTime; 

  /**部门编码**/
  @Column(name = "department_key" ,length = 20)
  private String departmentKey; 

  /**用户角色**/
  @ManyToMany(fetch = FetchType.EAGER)
  @JoinTable(name = "sys_user_role", joinColumns = { @JoinColumn(name = "user_id") }, inverseJoinColumns = { @JoinColumn(name = "role_id") })
  @Cache(region = "all", usage = CacheConcurrencyStrategy.READ_WRITE)
  private Set<SysRole> roles = new HashSet<SysRole>(); 

  /**get/set**/ 

  /**主键**/
  public Long getUserId(){
    return userId;
  }
  /**主键**/
  public void setUserId(Long userId){
    this.userId= userId;
  }
  /**登录账号**/
  public String getLoginAccount(){
    return loginAccount;
  }
  /**登录账号**/
  public void setLoginAccount(String loginAccount){
    this.loginAccount= loginAccount;
  }
  /**登录密码**/
  public String getLoginPass(){
    return loginPass;
  }
  /**登录密码**/
  public void setLoginPass(String loginPass){
    this.loginPass= loginPass;
  }
  /**昵称**/
  public String getUserName(){
    return userName;
  }
  /**昵称**/
  public void setUserName(String userName){
    this.userName= userName;
  }
  /**头像**/
  public String getUserHead(){
    return userHead;
  }
  /**头像**/
  public void setUserHead(String userHead){
    this.userHead= userHead;
  }
  /**手机**/
  public String getUserPhone(){
    return userPhone;
  }
  /**手机**/
  public void setUserPhone(String userPhone){
    this.userPhone= userPhone;
  }
  /**邮箱**/
  public String getUserEmail(){
    return userEmail;
  }
  /**邮箱**/
  public void setUserEmail(String userEmail){
    this.userEmail= userEmail;
  }
  /**性别**/
  public Integer getUserSex(){
    return userSex;
  }
  /**性别**/
  public void setUserSex(Integer userSex){
    this.userSex= userSex;
  }
  /**生日**/
  public String getUserBirthday(){
    return userBirthday;
  }
  /**生日**/
  public void setUserBirthday(String userBirthday){
    this.userBirthday= userBirthday;
  }
  /**注册时间**/
  public String getRegisterTime(){
    return registerTime;
  }
  /**注册时间**/
  public void setRegisterTime(String registerTime){
    this.registerTime= registerTime;
  } 

  public Set<SysRole> getRoles() {
    return roles;
  }
  public void setRoles(Set<SysRole> roles) {
    this.roles = roles;
  } 

}

角色实体SysRole：

import java.util.Set; 

import javax.persistence.Column;
import javax.persistence.ElementCollection;
import javax.persistence.Entity;
import javax.persistence.GeneratedValue;
import javax.persistence.Id;
import javax.persistence.JoinColumn;
import javax.persistence.JoinTable;
import javax.persistence.Table; 

import org.hibernate.annotations.Cache;
import org.hibernate.annotations.CacheConcurrencyStrategy; 

import yfkj.gz.support.BaseEntity; 

/**
 * 角色的实体类
 */
@Entity
@Table(name = "sys_role")
@Cache(region = "all", usage = CacheConcurrencyStrategy.READ_WRITE)
public class SysRole extends BaseEntity{ 

  // 各个字段的含义请查阅文档的数据库结构部分
  private static final long serialVersionUID = 6019103858711599150L;
  @Id
  @GeneratedValue
  @Column(name = "role_id")
  private Long roleId;
  @Column(name = "role_key", length = 40, nullable = false, unique = true)
  private String roleKey;
  @Column(name = "role_value", length = 40, nullable = false)
  private String roleValue;
  @Column(name = "create_time", length = 30)
  private String createTime;
  @Column(name = "description", length = 200)
  private String description; 

  @ElementCollection
  @JoinTable(name = "sys_role_permission", joinColumns = { @JoinColumn(name = "role_id") })
  @Cache(region = "all", usage = CacheConcurrencyStrategy.READ_WRITE)
  private Set<String> permissions; 

  @Column(name="company_id")
  private Long companyId; 

  public SysRole() { 

  } 

  public Long getRoleId() {
    return roleId;
  } 

  public void setRoleId(Long roleId) {
    this.roleId = roleId;
  } 

  public String getRoleKey() {
    return roleKey;
  } 

  public void setRoleKey(String roleKey) {
    this.roleKey = roleKey;
  } 

  public String getRoleValue() {
    return roleValue;
  } 

  public void setRoleValue(String roleValue) {
    this.roleValue = roleValue;
  } 

  public String getCreateTime() {
    return createTime;
  } 

  public void setCreateTime(String createTime) {
    this.createTime = createTime;
  } 

  public String getDescription() {
    return description;
  } 

  public void setDescription(String description) {
    this.description = description;
  } 

  public Set<String> getPermissions() {
    return permissions;
  } 

  public void setPermissions(Set<String> permissions) {
    this.permissions = permissions;
  } 

  public Long getCompanyId() {
    return companyId;
  } 

  public void setCompanyId(Long companyId) {
    this.companyId = companyId;
  } 

}

项目结构图：

源码地址：spring-shiro_jb51.rar

以上就是本文的全部内容，希望对大家的学习有所帮助，也希望大家多多支持我们。