spring security 01) 起步
<!-- struts2 support -->...<!-- spring security --><filter><filter-name>springSecurityFilterChain</filter-name><filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class></filter><filter-mapping><filter-name>springSecurityFilterChain</filter-name><url-pattern>/*</url-pattern><dispatcher>FORWARD</dispatcher><dispatcher>REQUEST</dispatcher></filter-mapping>
默认不要写<dispatcher>FORWARD</dispatcher>等，但不加的话，struts2 action的跳转拦截不到。
?
?
3. 建立一个applicationContext-security.xml的配置文件
<?xml version="1.0" encoding="UTF-8"?><beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd"> <http auto-config='true'> <intercept-url pattern="/WEB-INF/pages/demo/user_findUser.jsp" access="ROLE_ADMIN" /> <intercept-url pattern="/index2.jsp" access="ROLE_ADMIN" /> <intercept-url pattern="/**" access="ROLE_USER" /> </http><authentication-manager> <authentication-provider><user-service><user name="admin" password="admin" authorities="ROLE_USER, ROLE_ADMIN" /><user name="user" password="user" authorities="ROLE_USER" /></user-service> </authentication-provider> </authentication-manager></beans:beans>
?并在web.xml中引入这个文件。
classpath:applicationContext-security.xml,
?
?
这样，访问相应jsp时就需要相应的权限了，spring security还提供默认的登录页面。
?
?
