Spring Security使用权限注解实现精确控制

@PreAuthorize("hasRole('ADMIN')")
public String getAdminData() {
    return "这是管理员数据。";
}

@PreAuthorize("hasPermi('user:add')")
public String addUser() {
    return "用户添加成功";
}

@PreAuthorize("lacksPermi('user:delete')")
public String noDeletePermission() {
    return "你没有删除权限";
}

@PreAuthorize("hasAnyPermi('user:view', 'user:edit')")
public String viewOrEditUser() {
    return "你可以查看或修改用户";
}

@PreAuthorize("hasRole('USER')")
public String userRole() {
    return "你拥有USER角色";
}

@PreAuthorize("lacksRole('ADMIN')")
public String noAdminRole() {
    return "你不是管理员";
}

@PreAuthorize("hasAnyRole('USER', 'MODERATOR')")
public String userOrModeratorRole() {
    return "你是USER或MODERATOR角色";
}

@PreAuthorize("#user.username == authentication.name")
public String getOwnData(User user) {
    return "你访问了自己的数据";
}

@PreAuthorize("hasRole('ADMIN') or hasPermi('user:edit')")
public String adminOrEditPermission() {
    return "管理员或拥有修改权限者可访问";
}

@RestController
@RequestMapping("/public")
@Anonymous
public class PublicController {

    @GetMapping("/info")
    public String getInfo() {
        return "这是公共信息，不需要登录";
    }
}

@RestController
@RequestMapping("/api")
public class ApiController {

    @GetMapping("/admin")
    @PreAuthorize("hasRole('ADMIN')")
    public String adminData() {
        return "管理员专属数据。";
    }

    @GetMapping("/common")
    public String commonData() {
        return "这是通用数据。";
    }
}