Access control problem

permission control how to make one department can only view the data of another department, but cannot operate it. In other words, the data of all departments can be displayed, but some of them are not the data of that department and cannot be operated.

May.10,2021

the existing permission framework (such as shiro, spring security, etc.) supports the concept of role, and you can specify this permission in your role. Role permissions are determined by your own code. You can encapsulate select and update into two methods. Different roles can only call the method with permissions.

Menu