正在阅读：B/S系统权限控制的一种简单方法B/S系统权限控制的一种简单方法

  SecurityTagForField：
public class SecurityTagForField extends TagSupport
{
  private int permissionID;
  private String privilege;

  public int doStartTag() throws JspException
  {
   HttpSession session = pageContext.getSession();
   UserProfile userProfile = (UserProfile)session.getAttribute("userProfile");

    Collection collection= userProfile.getUserPermissions();
    Iterator it = collection.iterator() ;
    while(it.hasNext())
    {
      UserPermission userPermission = (UserPermission)it.next();
    if (privilege ==null)
       {
         if ( (permissionID == userPermission.getPermissionId()))
         {
           return EVAL_BODY_INCLUDE;
         }
       }
      else
      {
          if ((permissionID == userPermission.getPermissionId())
              &&(privilege.equals(userPermission.getPrivilege())))
          {
            return EVAL_BODY_INCLUDE;
          }
      }
    }
    return SKIP_BODY;
  }
  public int getPermissionID()
  {
    return permissionID;
  }
  public void setPermissionID(int permissionID)
  {
    this.permissionID = permissionID;
  }
  public String getPrivilege()
  {
    return privilege;