J2EE做网页中的权限控制数据库代码

package com.csu.filter; import java.io.File; import java.io.IOException; import java.io.InputStream; import java.net.MalformedURLException; import java.net.URL; import java.util.ArrayList; import java.util.List; import javax.servlet.Filter; import javax.servlet.FilterChain; import javax.servlet.FilterConfig; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import org.dom4j.Document; import org.dom4j.DocumentException; import org.dom4j.Element; import org.dom4j.io.SAXReader; import com.csu.entity.GrantStaff; import com.csu.util.Grant; public class GrantFilter implements Filter { private FilterConfig filterConfig; private List<String> listFileNames; public GrantFilter() { listFileNames = new ArrayList<String>(); } // 找到配置 public void init(FilterConfig filterConfig) throws ServletException { this.filterConfig = filterConfig; String filePath = this.filterConfig.getInitParameter("filePath"); ServletContext context = this.filterConfig.getServletContext();// 应用程序上下文 URL url = null; try { url = context.getResource(filePath); this.parseXml(url); } catch (Exception e) { // TODO Auto-generated catch block e.printStackTrace(); } } private void parseXml(URL url) { try { Document document = new SAXReader().read(url); Element rootEle = document.getRootElement(); List list = rootEle.elements("file"); for (int i = 0; i < list.size(); i++) { Object obj = list.get(i); if (obj instanceof Element) { Element fileEle = (Element) obj; this.listFileNames.add(fileEle.getText()); } } } catch (DocumentException e) { // TODO Auto-generated catch block e.printStackTrace(); } catch (Exception e) { e.printStackTrace(); } } public void doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain) throws IOException, ServletException { HttpServletRequest httpServletRequest = (HttpServletRequest) request; HttpServletResponse httpServletResponse = (HttpServletResponse) response; // 得到请求路径 String requestPath = httpServletRequest.getServletPath(); String querytString = httpServletRequest.getQueryString(); System.out.println(requestPath); System.out.println(httpServletRequest.getQueryString()); // 请求的地址是否不需要登录 boolean isPass = this.checkFile(requestPath); // 如果不需要登录真接过 if (isPass) { filterChain.doFilter(httpServletRequest, httpServletResponse); // 需要登录的页面检查用户是否登录 } else { HttpSession session = httpServletRequest.getSession(true); // 用户如果登录就过但是要看用户有没有权权限访问 if (session.getAttribute("LOGINUSER") != null) { GrantStaff grantStaff = (GrantStaff) session .getAttribute("LOGINUSER"); // 判断当前登录用户对所访问的路径有没有访问权限 boolean pass = grantStaff.isCheckPass(this.getRequestGrant( requestPath, querytString)); if (pass) { filterChain.doFilter(httpServletRequest, httpServletResponse); } else { httpServletResponse.sendRedirect("fail.jsp"); } } else { httpServletResponse.sendRedirect("fail.jsp"); } } } // 检查用户所请求的路径中的参数是不是合法的 private Grant getRequestGrant(String moduleName, String query) { // 得到一个对象：grant moduleName = moduleName.substring(1); query = query.substring(query.lastIndexOf("=") + 1); Grant grant = new Grant(); grant.setFunction(query); grant.setModuleURl(moduleName); return grant; } // 检查用户所请求的路径是不是合法的 private boolean checkFile(String path) { for (int i = 0; i < this.listFileNames.size(); i++) { if (path.equals(this.listFileNames.get(i))) { return true; } } return false; } public void destroy() { } }