利用session控制权限

public ModelAndView login(String loginName, String password, HttpServletRequest request) { ModelAndView mav = new ModelAndView(); try { //securityService().authenticate(loginName, password);

>>阅读原文<<