Shiro question: how do you authorize administrators?

for example,
because shiro commonly uses
to assign permissions according to roles, then the problem arises:
in the background management system, some resources are accessible to all administrators, but some fine-grained resources must have corresponding permissions.
can you do this:
Multi-role
Super Admin creates an ordinary administrator and assigns the role admin (administrator basic role, all administrators have). On this basis, the role of adding different permissions to each administrator (admin-xx)
is not familiar with shiro,. Is there any drawback and is there a better way to do so? Thank you


@ Override

public  boolean isPermitted(PrincipalCollection principals, String permission){
    SysUser user = (SysUser) principals.getPrimaryPrincipal();
    // 
    return user.getIsAdmin() == WhetherEnum.YES.getValue() || super.isPermitted(principals, permission);
}
@Override
public boolean hasRole(PrincipalCollection principals, String roleIdentifier) {
    SysUser user = (SysUser) principals.getPrimaryPrincipal();
    // 
    return user.getIsAdmin() == WhetherEnum.YES.getValue() || super.hasRole(principals, roleIdentifier);
}
Menu