方法级别权限控制

jsr-250

 3.@Secured注解使用

开启表达式的使用 

 页面控制

显示xxx在线 

<div class="pull-left info"><p><security:authentication property="principal.username"></security:authentication></p><a href="#"><i class="fa fa-circle text-success"></i> 在线</a>
</div>

拥有ANDMIN权限才能看

	<li id="system-setting"><security:authorize access="hasRole('ANDMIN')"></security:authorize><a href="${pageContext.request.contextPath}/user/findAll.do"> <iclass="fa fa-circle-o"></i> 用户管理</a>
</li>