This subject is anonymous - it does not have any identifying principals and authorization operations require an identity to check against. A Subject instance will acquire these identifying principals automatically after a successful login is performed be executing org.apache.shiro.subject.Subject.login(AuthenticationToken) or when ‘Remember Me’ functionality is enabled by the SecurityManager. This exception can also occur when a previously logged-in Subject has logged out which makes it anonymous again. Because an identity is currently not known due to any of these conditions, authorization is denied.
检查设置放行和单独设置是否冲突
shiro配置放行
controller再配置就会报错
解决方案
1.注释掉 @RequiresPermissions("equip:bdalterpart:page")
或者 filterMap.put("/equip/**", "anon");
2.controller 路径修改