apache shiro 自定义filter

public class MyFilter extends AuthorizationFilter {

@Override
protected boolean isAccessAllowed(ServletRequest request,
ServletResponse response, Object mappedValue) throws Exception {
Subject subject = SecurityUtils.getSubject();

String[] rolesArray = (String[]) mappedValue;

if (rolesArray == null || rolesArray.length == 0) {
return true;
}
for(int i=0;i<rolesArray.length;i++){
if(subject.hasRole(rolesArray[i])){
return true;
}
}

return false;
}

}