blocks|key|640585|text|您可以将springSecurityService注入到控制器中：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|640586|def+springSecurityService|640587|然后在你的行动中，调用：|640588|def+roles+=+springSecurityService.getPrincipal().getAuthorities()|640589|请参阅文档here。|640590|entityMap|0|LINK|mutability|MUTABLE|url|http://grails-plugins.github.io/grails-spring-security-core/docs/manual/guide/index.html^0|4|L|0|0|P|0|0|0|1T|0|5|4|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@$9|W|A|X|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Y|8|@$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|11|8|@]|D|@]|E|$]]|$1|J|3|K|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@]|E|$]]|$1|L|3|M|5|6|7|15|8|@]|D|@$9|16|A|17|1|18]]|E|$]]|$1|N|3|-4|5|6|7|19|8|@]|D|@]|E|$]]]|O|$P|$5|Q|R|S|E|$T|U]]]]

You can inject <code>springSecurityService</code> into your controller:

<code>def springSecurityService</code>

and then in your action, call:

<code>def roles = springSecurityService.getPrincipal().getAuthorities()</code>

See the docs <a href="http://grails-plugins.github.io/grails-spring-security-core/docs/manual/guide/index.html" rel="noreferrer">here</a>.

blocks|key|858020|text|在控制器中，您可以使用插件添加到元类中的两种方法：getPrincipal和isLoggedIn|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|858021|def+myAction+=+{
+++if+(loggedIn)+{
++++++//+will+be+a+List+of+String
++++++def+roleNames+=+principal.authorities*.authority
+++}
}|code-block|syntax|javascript|858022|如果该操作是安全的，则可以跳过loggedIn/isLoggedIn()检查。|858023|entityMap^0|P|C|12|A|0|0|F|8|O|C|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|T|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|U|8|@$9|V|A|W|B|C]|$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|M|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|N|$]]

From a controller you can use two methods the plugin adds to the metaclass, <code>getPrincipal</code> and <code>isLoggedIn</code>:

<pre><code>def myAction = {
 if (loggedIn) {
 // will be a List of String
 def roleNames = principal.authorities*.authority
 }
}
</code></pre>

If the action is secured you can skip the <code>loggedIn</code>/<code>isLoggedIn()</code> check.

blocks|key|640663|text|如果只需要检查用户是否属于某个特定的角色，那么可以使用SpringSecurityUtils.ifAllGranted，它以单个字符串作为参数，其中包含一个逗号分隔的角色列表。如果当前用户属于所有用户，则返回true。SpringSecurityUtils也有像ifAnyGranted、ifNotGranted等方法，所以无论你想要实现什么，它都应该可以工作。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|640664|entityMap^0|R|W|31|J|3N|C|40|C|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]|$9|M|A|N|B|C]|$9|O|A|P|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|G|$]]

If you simply need to check to see if a user is in a specific role then use <code>SpringSecurityUtils.ifAllGranted</code> which takes a single String as an argument which contains a comma-delimited list of roles. It will return true if the current user belongs to all of them. <code>SpringSecurityUtils</code> also has methods like <code>ifAnyGranted</code>, <code>ifNotGranted</code>, etc, so it should work for whatever it is you are trying to accomplish.

blocks|key|858078|text|您也可以单独使用getAuthenticatedUser()。此方法会自动注入到每个控制器中，因此只能从控制器中使用。如果您想从其他任何地方访问当前登录的用户，则必须使用其他方法之一。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|858079|entityMap^0|8|M|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

You can also use <code>getAuthenticatedUser()</code> by itself. This method is automatically injected in every controller, and thus only available from controllers. You will have to use one of the other methods if you want to access the current logged in user from anywhere else.

blocks|key|858100|text|为了让用户|type|unstyled|depth|inlineStyleRanges|entityRanges|data|858101|++++def+springSecurityService
++++def+principal+=+springSecurityService.principal
++++String+username+=+principal.username|code-block|syntax|javascript|858102|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

To get the user 

<pre><code> def springSecurityService
 def principal = springSecurityService.principal
 String username = principal.username
</code></pre>

blocks|key|858116|text|SecurityContextHolder知道：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|858117|SecurityContextHolder.getContext().getAuthentication().getAuthorities()|code-block|syntax|javascript|858118|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

SecurityContextHolder knows that:

<pre><code>SecurityContextHolder.getContext().getAuthentication().getAuthorities()
</code></pre>

I am using the spring-security-core plugin in my grails app. I need to know the current user's role in a controller action. How can I retrieve that?

How to get current user role with spring security plugin?

我在我的grails应用程序中使用了spring-security-core插件。我需要知道当前用户在控制器操作中的角色。我怎样才能检索到它？

问如何使用spring安全插件获取当前用户角色？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何使用spring安全插件获取当前用户角色？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何使用spring安全插件获取当前用户角色？
EN