securitytagforfield.java

B/S权限控制的例子

import java.util.*;
import javax.servlet.http.*;
import javax.servlet.jsp.*;
import javax.servlet.jsp.tagext.*;

public class SecurityTagForField extends TagSupport
{
  private int permissionID;
  private String privilege;
  public int doStartTag() throws JspException
  {
   HttpSession session = pageContext.getSession();
   UserProfile userProfile = (UserProfile)session.getAttribute("userProfile");
    Collection collection= userProfile.getUserPermissions();
    Iterator it = collection.iterator() ;
    while(it.hasNext())
    {
      UserPermission userPermission = (UserPermission)it.next();
    if (privilege ==null)
       {
         if ( (permissionID == userPermission.getPermissionId()))
         {
           return EVAL_BODY_INCLUDE;
         }
       }
      else
      {
          if ((permissionID == userPermission.getPermissionId())
              &&(privilege.equals(userPermission.getPrivilege())))
          {
            return EVAL_BODY_INCLUDE;
          }
      }
    }
    return SKIP_BODY;
  }
  public int getPermissionID()
  {
    return permissionID;
  }
  public void setPermissionID(int permissionID)
  {
    this.permissionID = permissionID;
  }
  public String getPrivilege()
  {
    return privilege;
 
 }
  public void setPrivilege(String privilege)
  {
    this.privilege = privilege;
  }
}