@PreAuthorize("@pms.hasPermission('1-6')")
@ApiOperation("查 詢")
@GetMapping
public PageResponse<RoleCO> pageRole(RolePageQry qry){
    return roleService.listPage(qry);
}

public interface Pms {


    /**
     * 判斷接口是否有任意xxx，xxx權(quán)限
     *
     * @param permission 權(quán)限
     * @return {boolean}
     */
    default boolean hasPermission(String permission) {
        if (StrUtil.isBlank(permission)) {
            return false;
        }
        return listPermissions().contains(permission);
    }
//
    default boolean hasAnyPermission(String... permissions) {
        if (CollectionUtil.isEmpty(Arrays.asList(permissions))) {
            return false;
        }
        return listPermissions().stream().filter(StringUtils::hasText)
                .anyMatch(x -> PatternMatchUtils.simpleMatch(permissions, x));
    }

    List<String> listPermissions();
}

@Data
public class Pms implements com.jjb.saas.framework.api.system.Pms {

    /**
     * 菜單下有哪些按鈕權(quán)限
     *
     * @param
     * @return {boolean}
     */
    @Override
    public List<String> listPermissions() {
        MultiResponse multiResponse = FacadeServiceFactory.getInstance().genericInvoke("com.jjb.saas.system.client.permsgroup.facade.PermsGroupFacade", "listPermssionsByAppKey", MultiResponse.class);
        if (multiResponse.isSuccess()) {
            List datas = multiResponse.getData();
            if (ObjectUtil.isNotEmpty(datas)) {
                return datas;
            }
            return Collections.emptyList();
        }
        return Collections.emptyList();
    }
}

@ComponentScan
@EnableMBeanExport(registration = RegistrationPolicy.IGNORE_EXISTING)
@AllArgsConstructor
public class SecurityConfiguration {
    @Bean("pms")
    @ConditionalOnMissingBean
    public Pms pms() {
        Pms pms = new Pms();
        return pms;
    }
}

@Target({ElementType.METHOD, ElementType.TYPE})
@Retention(RetentionPolicy.RUNTIME)
public @interface PreAuth {

 /**
  *
  *
  * permissionAll()-----只要配置了角色就可以訪問
  * hasPermission("MENU.QUERY")-----有MENU.QUERY操作權(quán)限的角色可以訪問
  * permitAll()-----放行所有請求
  * denyAll()-----只有超級管理員角色才可訪問
  * hasAuth()-----只有登錄后才可訪問
  * hasTimeAuth(1,，10)-----只有在1-10點(diǎn)間訪問
  * hasRole(‘管理員')-----具有管理員角色的人才能訪問
  * hasAllRole(‘管理員','總工程師')-----同時(shí)具有管理員、總工程師角色的人才能訪問
  *
  * Spring el
  * 文檔地址：https://docs.spring.io/spring/docs/5.1.6.RELEASE/spring-framework-reference/core.html#expressions
  */
 String value();

}

@Around(
  "@annotation(PreAuth注解路徑) || " +
   "@within(PreAuth注解路徑)"
 )
 public Object preAuth(ProceedingJoinPoint point) throws Throwable {
  if (handleAuth(point)) {
   return point.proceed();
  }
  throw new SecureException(ResultCode.REQ_REJECT);
 }

    private boolean handleAuth(ProceedingJoinPoint point) {
        //TODO 邏輯判斷，返回true or false
    }

private static final ExpressionParser EXPRESSION_PARSER = new SpelExpressionParser();

MethodSignature ms = point.getSignature() instanceof MethodSignature? (MethodSignature) point.getSignature():null;
  Method method = ms.getMethod();
  // 讀取權(quán)限注解，優(yōu)先方法上，沒有則讀取類
  PreAuth preAuth = ClassUtil.getAnnotation(method, PreAuth.class);
  // 判斷表達(dá)式
  String condition = preAuth.value();
  if (StringUtil.isNotBlank(condition)) {
            //TODU 表達(dá)式解析
        }

private boolean handleAuth(ProceedingJoinPoint point) {
  MethodSignature ms = point.getSignature() instanceof MethodSignature? (MethodSignature) point.getSignature():null;
  Method method = ms.getMethod();
  // 讀取權(quán)限注解，優(yōu)先方法上，沒有則讀取類
  PreAuth preAuth = ClassUtil.getAnnotation(method, PreAuth.class);
  // 判斷表達(dá)式
  String condition = preAuth.value();
  if (StringUtil.isNotBlank(condition)) {
   Expression expression = EXPRESSION_PARSER.parseExpression(condition);
   // 方法參數(shù)值
   Object[] args = point.getArgs();
   StandardEvaluationContext context = getEvaluationContext(method, args);
            //獲取解析計(jì)算的結(jié)果
   return expression.getValue(context, Boolean.class);
  }
  return false;
 }
 /**
  * 獲取方法上的參數(shù)
  *
  * @param method 方法
  * @param args   變量
  * @return {SimpleEvaluationContext}
  */
private StandardEvaluationContext getEvaluationContext(Method method, Object[] args) {
  // 初始化Sp el表達(dá)式上下文，并設(shè)置 AuthFun
  StandardEvaluationContext context = new StandardEvaluationContext(new AuthFun());
  // 設(shè)置表達(dá)式支持spring bean
  context.setBeanResolver(new BeanFactoryResolver(applicationContext));
  for (int i = 0; i < args.length; i++) {
   // 讀取方法參數(shù)
   MethodParameter methodParam = ClassUtil.getMethodParameter(method, i);
   // 設(shè)置方法 參數(shù)名和值 為spel變量
   context.setVariable(methodParam.getParameterName(), args[i]);
  }
  return context;
 }

public class AuthFun {


 /**
  * 判斷角色是否具有接口權(quán)限
  *
  * @return {boolean}
  */
 public boolean permissionAll() {
  //TODO
 }

 /**
  * 判斷角色是否具有接口權(quán)限
  *
  * @param permission 權(quán)限編號,對應(yīng)菜單的MENU_CODE
  * @return {boolean}
  */
 public boolean hasPermission(String permission) {
  //TODO
 }

 /**
  * 放行所有請求
  *
  * @return {boolean}
  */
 public boolean permitAll() {
  return true;
 }

 /**
  * 只有超管角色才可訪問
  *
  * @return {boolean}
  */
 public boolean denyAll() {
  return hasRole(RoleConstant.ADMIN);
 }

 /**
  * 是否已授權(quán)
  *
  * @return {boolean}
  */
 public boolean hasAuth() {
  if(Func.isEmpty(AuthUtil.getUser())){
   // TODO 返回異常提醒
  }else{
   return true;
  }
 }

 /**
  * 是否有時(shí)間授權(quán)
  *
  * @param start 開始時(shí)間
  * @param end   結(jié)束時(shí)間
  * @return {boolean}
  */
 public boolean hasTimeAuth(Integer start, Integer end) {
  Integer hour = DateUtil.hour();
  return hour >= start && hour <= end;
 }

 /**
  * 判斷是否有該角色權(quán)限
  *
  * @param role 單角色
  * @return {boolean}
  */
 public boolean hasRole(String role) {
  return hasAnyRole(role);
 }

 /**
  * 判斷是否具有所有角色權(quán)限
  *
  * @param role 角色集合
  * @return {boolean}
  */
 public boolean hasAllRole(String... role) {
  for (String r : role) {
   if (!hasRole(r)) {
    return false;
   }
  }
  return true;
 }

 /**
  * 判斷是否有該角色權(quán)限
  *
  * @param role 角色集合
  * @return {boolean}
  */
 public boolean hasAnyRole(String... role) {
        //獲取當(dāng)前登錄用戶
  BladeUser user = AuthUtil.getUser();
  if (user == null) {
   return false;
  }
  String userRole = user.getRoleName();
  if (StringUtil.isBlank(userRole)) {
   return false;
  }
  String[] roles = Func.toStrArray(userRole);
  for (String r : role) {
   if (CollectionUtil.contains(roles, r)) {
    return true;
   }
  }
  return false;
 }

}

@PreAuth("hasPermission('LM_QUERY,LM_QUERY_ALL')")
public T 接口名稱....