一、需求分析

不同角色的用户登录后台管理系统拥有不同的菜单权限与功能权限，权限管理包含三个功能模块：菜单管理、角色管理和用户管理

二、在项目中创建权限管理服务

1、在service模块下创建子模块service-acl

2、在service_acl模块中引入依赖

<dependencies> <dependency> <groupId>com.yunxun</groupId> <artifactId>spring_security</artifactId> <version>0.0.1-SNAPSHOT</version> </dependency> <dependency> <groupId>com.alibaba</groupId> <artifactId>fastjson</artifactId> </dependency> </dependencies>

3、编写application.properties配置文件

# 服务端口 server.port=8009 # 服务名 spring.application.name=service-acl # mysql数据库连接 spring.datasource.driver-class-name=com.mysql.cj.jdbc.Driver spring.datasource.url=jdbc:mysql://localhost:3306/guli?serverTimezone=GMT%2B8 spring.datasource.username=root spring.datasource.password=root #返回json的全局时间格式 spring.jackson.date-format=yyyy-MM-dd HH:mm:ss spring.jackson.time-zone=GMT+8 spring.redis.host=192.168.44.132 spring.redis.port=6379 spring.redis.database= 0 spring.redis.timeout=1800000 spring.redis.lettuce.pool.max-active=20 spring.redis.lettuce.pool.max-wait=-1 #最大阻塞等待时间(负数表示没限制) spring.redis.lettuce.pool.max-idle=5 spring.redis.lettuce.pool.min-idle=0 #最小空闲 #配置mapper xml文件的路径 mybatis-plus.mapper-locations=classpath:com/atguigu/aclservice/mapper/xml/*.xml # nacos服务地址 spring.cloud.nacos.discovery.server-addr=127.0.0.1:8848 #mybatis日志 mybatis-plus.configuration.log-impl=org.apache.ibatis.logging.stdout.StdOutImpl

4、 创建权限管理相关的表

5、复制公司权限管理接口代码

6、复制整合Spring Security代码

（1）在common模块下创建子模块spring_security

三、在service_acl项目开发权限管理接口

1、获取所有菜单—递归查询===给角色分配菜单

（1）PermissionController

package com.atguigu.aclservice.controller; /** * <p> * 权限 菜单管理 * </p> * * @author testjava * @since 2020-01-12 */ @RestController @RequestMapping("/admin/acl/permission") //@CrossOrigin public class PermissionController { @Autowired private PermissionService permissionService; //获取全部菜单 @ApiOperation(value = "查询所有菜单") @GetMapping public R indexAllPermission() { List<Permission> list = permissionService.queryAllMenuGuli(); return R.ok().data("children",list); } @ApiOperation(value = "递归删除菜单") @DeleteMapping("remove/{id}") public R remove(@PathVariable String id) { permissionService.removeChildByIdGuli(id); return R.ok(); } @ApiOperation(value = "给角色分配权限") @PostMapping("/doAssign") public R doAssign(String roleId,String[] permissionId) { permissionService.saveRolePermissionRealtionShipGuli(roleId,permissionId); return R.ok(); } @ApiOperation(value = "根据角色获取菜单") @GetMapping("toAssign/{roleId}") public R toAssign(@PathVariable String roleId) { List<Permission> list = permissionService.selectAllMenu(roleId); return R.ok().data("children", list); } @ApiOperation(value = "新增菜单") @PostMapping("save") public R save(@RequestBody Permission permission) { permissionService.save(permission); return R.ok(); } @ApiOperation(value = "修改菜单") @PutMapping("update") public R updateById(@RequestBody Permission permission) { permissionService.updateById(permission); return R.ok(); } }

**（2）PermissionServiceImpl **

package com.atguigu.aclservice.service.impl; /** * <p> * 权限 服务实现类 * </p> * * @author testjava * @since 2020-01-12 */ @Service public class PermissionServiceImpl extends ServiceImpl<PermissionMapper, Permission> implements PermissionService { @Autowired private RolePermissionService rolePermissionService; @Autowired private UserService userService; //获取全部菜单 @Override public List<Permission> queryAllMenu() { QueryWrapper<Permission> wrapper = new QueryWrapper<>(); wrapper.orderByDesc("id"); List<Permission> permissionList = baseMapper.selectList(wrapper); List<Permission> result = bulid(permissionList); return result; } //根据角色获取菜单 @Override public List<Permission> selectAllMenu(String roleId) { List<Permission> allPermissionList = baseMapper.selectList(new QueryWrapper<Permission>().orderByAsc("CAST(id AS SIGNED)")); //根据角色id获取角色权限 List<RolePermission> rolePermissionList = rolePermissionService.list(new QueryWrapper<RolePermission>().eq("role_id",roleId)); //转换给角色id与角色权限对应Map对象 // List<String> permissionIdList = rolePermissionList.stream().map(e -> e.getPermissionId()).collect(Collectors.toList()); // allPermissionList.forEach(permission -> { // if(permissionIdList.contains(permission.getId())) { // permission.setSelect(true); // } else { // permission.setSelect(false); // } // }); for (int i = 0; i < allPermissionList.size(); i++) { Permission permission = allPermissionList.get(i); for (int m = 0; m < rolePermissionList.size(); m++) { RolePermission rolePermission = rolePermissionList.get(m); if(rolePermission.getPermissionId().equals(permission.getId())) { permission.setSelect(true); } } } List<Permission> permissionList = bulid(allPermissionList); return permissionList; } //给角色分配权限 @Override public void saveRolePermissionRealtionShip(String roleId, String[] permissionIds) { rolePermissionService.remove(new QueryWrapper<RolePermission>().eq("role_id", roleId)); List<RolePermission> rolePermissionList = new ArrayList<>(); for(String permissionId : permissionIds) { if(StringUtils.isEmpty(permissionId)) continue; RolePermission rolePermission = new RolePermission(); rolePermission.setRoleId(roleId); rolePermission.setPermissionId(permissionId); rolePermissionList.add(rolePermission); } rolePermissionService.saveBatch(rolePermissionList); } //递归删除菜单 @Override public void removeChildById(String id) { List<String> idList = new ArrayList<>(); this.selectChildListById(id, idList); idList.add(id); baseMapper.deleteBatchIds(idList); } //根据用户id获取用户菜单 @Override public List<String> selectPermissionValueByUserId(String id) { List<String> selectPermissionValueList = null; if(this.isSysAdmin(id)) { //如果是系统管理员，获取所有权限 selectPermissionValueList = baseMapper.selectAllPermissionValue(); } else { selectPermissionValueList = baseMapper.selectPermissionValueByUserId(id); } return selectPermissionValueList; } @Override public List<JSONObject> selectPermissionByUserId(String userId) { List<Permission> selectPermissionList = null; if(this.isSysAdmin(userId)) { //如果是超级管理员，获取所有菜单 selectPermissionList = baseMapper.selectList(null); } else { selectPermissionList = baseMapper.selectPermissionByUserId(userId); } List<Permission> permissionList = PermissionHelper.bulid(selectPermissionList); List<JSONObject> result = MemuHelper.bulid(permissionList); return result; } /** * 判断用户是否系统管理员 * @param userId * @return */ private boolean isSysAdmin(String userId) { User user = userService.getById(userId); if(null != user && "admin".equals(user.getUsername())) { return true; } return false; } /** * 递归获取子节点 * @param id * @param idList */ private void selectChildListById(String id, List<String> idList) { List<Permission> childList = baseMapper.selectList(new QueryWrapper<Permission>().eq("pid", id).select("id")); childList.stream().forEach(item -> { idList.add(item.getId()); this.selectChildListById(item.getId(), idList); }); } /** * 使用递归方法建菜单 * @param treeNodes * @return */ private static List<Permission> bulid(List<Permission> treeNodes) { List<Permission> trees = new ArrayList<>(); for (Permission treeNode : treeNodes) { if ("0".equals(treeNode.getPid())) { treeNode.setLevel(1); trees.add(findChildren(treeNode,treeNodes)); } } return trees; } /** * 递归查找子节点 * @param treeNodes * @return */ private static Permission findChildren(Permission treeNode,List<Permission> treeNodes) { treeNode.setChildren(new ArrayList<Permission>()); for (Permission it : treeNodes) { if(treeNode.getId().equals(it.getPid())) { int level = treeNode.getLevel() + 1; it.setLevel(level); if (treeNode.getChildren() == null) { treeNode.setChildren(new ArrayList<>()); } treeNode.getChildren().add(findChildren(it,treeNodes)); } } return treeNode; } //========================递归查询所有菜单================================================ //获取全部菜单 @Override public List<Permission> queryAllMenuGuli() { //1 查询菜单表所有数据 QueryWrapper<Permission> wrapper = new QueryWrapper<>(); wrapper.orderByDesc("id"); List<Permission> permissionList = baseMapper.selectList(wrapper); //2 把查询所有菜单list集合按照要求进行封装 List<Permission> resultList = bulidPermission(permissionList); return resultList; } //把返回所有菜单list集合进行封装的方法---递归查询，最大难点找到入口 public static List<Permission> bulidPermission(List<Permission> permissionList) { //创建list集合，用于数据最终封装 List<Permission> finalNode = new ArrayList<>(); //把所有菜单list集合遍历，得到顶层菜单 pid=0菜单，设置level是1，permissionNode 菜单对象 for(Permission permissionNode : permissionList) { //得到顶层菜单 pid=0菜单 if("0".equals(permissionNode.getPid())) { //设置顶层菜单的level是1 permissionNode.setLevel(1); //根据顶层菜单，向里面进行查询子菜单，封装到finalNode里面 //permissionNode 顶级菜单 permissionList 所有菜单 finalNode.add(selectChildren(permissionNode,permissionList)); } } return finalNode; } //查询顶级菜单以下的子菜单 private static Permission selectChildren(Permission permissionNode, List<Permission> permissionList) { //1 因为向一层菜单里面放二层菜单，二层里面还要放三层，把对象初始化 permissionNode.setChildren(new ArrayList<Permission>()); //2 遍历所有菜单list集合，进行判断比较，比较id和pid值是否相同 for(Permission it : permissionList) { //判断 id和pid值是否相同，一级id与二级Pid相同 if(permissionNode.getId().equals(it.getPid())) { //把父菜单的level值+1 int level = permissionNode.getLevel()+1; it.setLevel(level); //如果children为空，进行初始化操作 if(permissionNode.getChildren() == null) { permissionNode.setChildren(new ArrayList<Permission>()); } //把查询出来的（二级）子菜单放到（一级）父菜单里面，再次调用方法进行递归查询下级菜单 permissionNode.getChildren().add(selectChildren(it,permissionList)); } } return permissionNode; } //============递归删除菜单================================== @Override public void removeChildByIdGuli(String id) { //1 创建list集合，用于封装所有删除菜单id值 List<String> idList = new ArrayList<>(); //2 向idList集合设置删除菜单id this.selectPermissionChildById(id,idList); //把当前id封装到list里面 idList.add(id); baseMapper.deleteBatchIds(idList); } //2 根据当前菜单id，查询菜单里面子菜单id，封装到list集合 private void selectPermissionChildById(String id, List<String> idList) { //查询菜单里面子菜单id QueryWrapper<Permission> wrapper = new QueryWrapper<>(); wrapper.eq("pid",id); wrapper.select("id"); List<Permission> childIdList = baseMapper.selectList(wrapper); //把childIdList里面菜单id值获取出来，封装idList里面，做递归查询 childIdList.stream().forEach(item -> { //封装idList里面 idList.add(item.getId()); //递归查询 this.selectPermissionChildById(item.getId(),idList); }); } //=========================给角色分配菜单======================= @Override public void saveRolePermissionRealtionShipGuli(String roleId, String[] permissionIds) { //roleId角色id //permissionId菜单id 数组形式 //1 创建list集合，用于封装添加数据 List<RolePermission> rolePermissionList = new ArrayList<>(); //遍历所有菜单数组 for(String perId : permissionIds) { //RolePermission对象 RolePermission rolePermission = new RolePermission(); rolePermission.setRoleId(roleId); rolePermission.setPermissionId(perId); //封装到list集合 rolePermissionList.add(rolePermission); } //添加到角色菜单关系表 rolePermissionService.saveBatch(rolePermissionList); } }