利用Cglib代理模拟OA 中某些操作的权限校验

最新推荐文章于 2025-09-11 22:10:09 发布

转载最新推荐文章于 2025-09-11 22:10:09 发布 · 90 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/u/2346823/blog/1581448

文章标签：

#python #java

本文介绍了一个使用Cglib实现的权限校验案例，通过动态代理技术确保只有特定角色（如老板）才能查看薪资信息。文章展示了如何集成网络环境检查、日志记录等辅助功能，并提供了完整的代码示例。

2019独角兽企业重金招聘Python工程师标准>>>

/* 3个辅助类*/

//检查网络

public class CheckSafe {

public void checkSafe() {
	System.out.println("正在检测网络环境");
}

}

public class Logger {

public void log() {

	System.out.println("正在记录当前操作");
}

}

/关于权限的javabean/

public class Privillage {

private String access;

public String getAccess() {
	return access;
}

public void setAccess(String success) {
	this.access = success;
}

}

// 目标类

/需求是利用cglib 来检查是否有足够的权限去查看工资 OA/

public class ShowSalary {

public void showSalary() {

	System.out.println("你的薪资是300000$");
}

}

package com.cheng.oashowsalary;

import java.lang.reflect.Method;

import org.junit.experimental.runners.Enclosed;

import net.sf.cglib.proxy.Enhancer; import net.sf.cglib.proxy.MethodInterceptor; import net.sf.cglib.proxy.MethodProxy;

public class CglibShowSalaryintercepter implements MethodInterceptor {

public Privillage privillage;
private Object target;
private Logger logger;
private CheckSafe checkSafe;

public CglibShowSalaryintercepter(Privillage privillage, Object target, Logger logger, CheckSafe checkSafe) {
	this.privillage = privillage;
	this.target = target;
	this.logger = logger;
	this.checkSafe = checkSafe;
}

// 创建子类代理对象
public Object createProxy() {
	Enhancer enhancer = new Enhancer();
	enhancer.setCallback(this);
	enhancer.setClassLoader(target.getClass().getClassLoader());
	enhancer.setSuperclass(target.getClass());
	enhancer.setInterfaces(target.getClass().getInterfaces());

	return enhancer.create();
}

public Object intercept(Object arg0, Method method, Object[] args, MethodProxy arg3) throws Throwable {
	// 无论是否具有权限 都要被记录其操作 以及检查其所在网络环境
	checkSafe.checkSafe();
	logger.log();
	String name = method.getName();
	// 对于查看薪资的方法必须查看其权限
	if (name.equals("showSalary")) {
		String access = privillage.getAccess();
		if (access.equals("boss")) {
			method.invoke(target, args);
		} else {
			System.out.println("你无权查看薪资");
		}

	} else {
		// 目标对象
		method.invoke(target, args);
	}
	return null;

}

}

package com.cheng.oashowsalary;

import static org.junit.Assert.*;

import org.junit.Test;

public class CglibShowSalaryintercepterTest {

[@Test](https://my.oschina.net/azibug)
public void testCreateProxy() {
	Privillage privillage = new Privillage();
	privillage.setAccess("boss");
	ShowSalary target = new ShowSalary();
	CglibShowSalaryintercepter cglibShowSalaryintercepter = new CglibShowSalaryintercepter(privillage, target,
			new Logger(), new CheckSafe());
	ShowSalary showSalary = (ShowSalary) cglibShowSalaryintercepter.createProxy();

	showSalary.showSalary();
}

}

转载于:https://my.oschina.net/u/2346823/blog/1581448