perms["user:delete"]

perms是你必須具備的權限，在xml里設置的。

@Override
protected?AuthorizationInfo?doGetAuthorizationInfo(PrincipalCollection?principals)?{
????String?username?=?(String)?principals.getPrimaryPrincipal();
????//?從數據庫或者緩存中獲得角色數據
????Set<String>?roles?=?getRolesByUserName(username);
????Set<String>?permissions?=?getPermissionsByUserName(username);

????SimpleAuthorizationInfo?simpleAuthorizationInfo?=?new?SimpleAuthorizationInfo();
????simpleAuthorizationInfo.setStringPermissions(permissions);
????simpleAuthorizationInfo.setRoles(roles);

????return?simpleAuthorizationInfo;
}

這是你授權的時候查的。