spring3+struts2+hibernate3+dwr3+spring security3+ajax请求+数据库配置权限 完整实例
闲来无聊自己整合了一下这几个框架,大家可以参考学习
项目结构:
web.xml
1 <?xml version="1.0" encoding="UTF-8"?> 2 <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0"> 3 <display-name>S3S2H3</display-name> 4 <!-- 设置log4j存放Log文件位置(通过spring统一进行管理) --> 5 <context-param> 6 <param-name>webAppRootKey</param-name> 7 <param-value>log.root</param-value> 8 </context-param> 9 10 <!-- 加载log4j的配置文件 --> 11 <context-param> 12 <param-name>log4jConfigLocation</param-name> 13 <param-value>classpath:log4j.properties</param-value> 14 </context-param> 15 <!--Spring默认刷新Log4j配置文件的间隔,单位为millisecond--> 16 <context-param> 17 <param-name>log4jRefreshInterval</param-name> 18 <param-value>60000</param-value> 19 </context-param> 20 21 <context-param> 22 <param-name>contextConfigLocation</param-name> 23 <param-value>classpath*:applicationContext.xml,classpath:dao.xml,classpath:applicationContext-security.xml</param-value> 24 </context-param> 25 <!-- 为spring容器进行实例化 --> 26 <listener> 27 <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> 28 </listener> 29 <!-- <listener> --> 30 <!-- <listener-class>cn.com.sengis.service.listeners.SessionListener</listener-class> --> 31 <!-- </listener> --> 32 <!-- session的监听 --> 33 <listener> 34 <listener-class>org.springframework.security.web.session.HttpSessionEventPublisher</listener-class> 35 </listener> 36 <filter> 37 <filter-name>OpenSessionInViewFilter</filter-name> 38 <filter-class>org.springframework.orm.hibernate3.support.OpenSessionInViewFilter</filter-class> 39 </filter> 40 <filter-mapping> 41 <filter-name>OpenSessionInViewFilter</filter-name> 42 <url-pattern>/*</url-pattern> 43 </filter-mapping> 44 <!-- 权限 --> 45 <filter> 46 <filter-name>springSecurityFilterChain</filter-name> 47 <filter-class> 48 org.springframework.web.filter.DelegatingFilterProxy 49 </filter-class> 50 </filter> 51 <filter-mapping> 52 <filter-name>springSecurityFilterChain</filter-name> 53 <url-pattern>/*</url-pattern> 54 </filter-mapping> 55 56 <filter> 57 <filter-name>struts2</filter-name> 58 <filter-class>org.apache.struts2.dispatcher.ng.filter.StrutsPrepareAndExecuteFilter</filter-class> 59 </filter> 60 <!-- <filter> --> 61 <!-- <filter-name>encodingFilter</filter-name> --> 62 <!-- <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class> --> 63 <!-- <init-param> --> 64 <!-- <param-name>encoding</param-name> --> 65 <!-- <param-value>UTF-8</param-value> --> 66 <!-- </init-param> --> 67 <!-- </filter> --> 68 <!-- <filter-mapping> --> 69 <!-- <filter-name>encodingFilter</filter-name> --> 70 <!-- <url-pattern>/*</url-pattern> --> 71 <!-- </filter-mapping> --> 72 <filter-mapping> 73 <filter-name>struts2</filter-name> 74 <url-pattern>*.action</url-pattern> 75 </filter-mapping> 76 77 78 <!-- DWR配置 --> 79 <servlet> 80 <servlet-name>dwr-invoker</servlet-name> 81 <servlet-class>org.directwebremoting.spring.DwrSpringServlet</servlet-class> 82 <init-param> 83 <param-name>debug</param-name> 84 <param-value>true</param-value> 85 </init-param> 86 <init-param> 87 <param-name>crossDomainSessionSecurity</param-name> 88 <param-value>false</param-value> 89 </init-param> 90 <init-param> 91 <param-name>allowScriptTagRemoting</param-name> 92 <param-value>true</param-value> 93 </init-param> 94 <init-param> 95 <description>使用服务器推技术(反转AJAX)</description> 96 <param-name>activeReverseAjaxEnabled</param-name> 97 <param-value>true</param-value> 98 </init-param> 99 <init-param> 100 <param-name> 101 initApplicationScopeCreatorsAtStartup 102 </param-name> 103 <param-value>true</param-value> 104 </init-param> 105 <init-param> 106 <param-name>maxWaitAfterWrite</param-name> 107 <param-value>100</param-value> 108 </init-param> 109 <load-on-startup>4</load-on-startup> 110 </servlet> 111 <servlet-mapping> 112 <servlet-name>dwr-invoker</servlet-name> 113 <url-pattern>/dwr/*</url-pattern> 114 </servlet-mapping> 115 116 <!-- Spring刷新Interceptor防止内存泄漏 --> 117 <listener> 118 <listener-class> 119 org.springframework.web.util.IntrospectorCleanupListener 120 </listener-class> 121 </listener> 122 <welcome-file-list> 123 <welcome-file>index.html</welcome-file> 124 <welcome-file>index.htm</welcome-file> 125 <welcome-file>index.jsp</welcome-file> 126 <welcome-file>default.html</welcome-file> 127 <welcome-file>default.htm</welcome-file> 128 <welcome-file>default.jsp</welcome-file> 129 </welcome-file-list> 130 </web-app>
applicationContext.xml
1 <?xml version="1.0" encoding="UTF-8"?> 2 <beans xmlns="http://www.springframework.org/schema/beans" 3 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 4 xmlns:dwr="http://www.directwebremoting.org/schema/spring-dwr" 5 xmlns:aop="http://www.springframework.org/schema/aop" 6 xmlns:tx="http://www.springframework.org/schema/tx" 7 xmlns:p="http://www.springframework.org/schema/p" 8 xmlns:context="http://www.springframework.org/schema/context" 9 xsi:schemaLocation=" 10 http://www.springframework.org/schema/beans 11 http://www.springframework.org/schema/beans/spring-beans-3.0.xsd 12 http://www.springframework.org/schema/tx 13 http://www.springframework.org/schema/tx/spring-tx-3.0.xsd 14 http://www.springframework.org/schema/context 15 http://www.springframework.org/schema/context/spring-context-3.0.xsd 16 http://www.springframework.org/schema/aop 17 http://www.springframework.org/schema/aop/spring-aop-3.0.xsd 18 http://www.directwebremoting.org/schema/spring-dwr 19 http://www.directwebremoting.org/schema/spring-dwr-3.0.xsd "> 20 <!-- 配置项不但启用了对类包进行扫描以实施注释驱动 Bean 定义的功能,同时还启用了注释驱动自动注入的功能 --> 21 <context:annotation-config /> 22 <context:component-scan base-package="cn.com.sengis" /> 23 <bean id="propertyConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer"> 24 <property name="locations"> 25 <list> 26 <value>classpath:jdbc.properties</value> 27 </list> 28 </property> 29 </bean> 30 31 <bean id="dataSource" class="com.mchange.v2.c3p0.ComboPooledDataSource" destroy-method="close"> 32 <property name="driverClass" value="${connection.driver_class}"></property> 33 <property name="jdbcUrl" value="${connection.url}"></property> 34 <property name="user" value="${connection.username}"></property> 35 <property name="password" value="${connection.password}"></property> 36 <!-- 指定连接池的最大连接数 --> 37 <property name="maxPoolSize" value="${proxool.maximum.connection.count}"></property> 38 <property name="minPoolSize" value="${proxool.minimum.connection.count}"></property> 39 <!-- 指定连接数据库连接池的初始化连接数 --> 40 <property name="initialPoolSize" value="${proxool.initialPoolSize}"></property> 41 <!-- 指定连接数据库连接池的最大连接时间 --> 42 <property name="maxIdleTime" value="${proxool.maxIdleTime}"></property> 43 </bean> 44 45 <!-- 定义Hibernate的sessionFactory,通过该Bean,可以获得Hibernate的Session--> 46 <bean id="sessionFactory" 47 class="org.springframework.orm.hibernate3.LocalSessionFactoryBean"> 48 <property name="dataSource"> 49 <ref bean="dataSource" /> 50 </property> 51 <property name="hibernateProperties"> 52 <props> 53 <!--org.hibernate.dialect.MySQLInnoDBDialect --> 54 <prop key="hibernate.dialect"> 55 org.hibernate.dialect.MySQL5Dialect 56 </prop> 57 <!-- 是否根据需要创建数据库 --> 58 <prop key="hibernate.hbm2ddl.auto">update</prop> 59 <!--设置显示Hibernate操作的SQL语句--> 60 <prop key="hibernate.show_sql">true</prop> 61 <!-- 将sql脚本格式化后输出 --> 62 <prop key="hibernate.format_sql">true</prop> 63 <!--设置二级缓冲--> 64 <!--<prop key="hibernate.cache.provider_class">org.hibernate.cache.EhCacheProvider</prop> --> 65 <!--设置二级缓冲,打开查询缓冲--> 66 <!--<prop key="hibernate.cache.use_query_cache">true</prop> --> 67 </props> 68 </property> 69 <!-- 映射文件配置 --> 70 <property name="mappingResources"> 71 <list> 72 <value>cn/com/sengis/bean/Student.hbm.xml</value> 73 <value>cn/com/sengis/bean/Resources.hbm.xml</value> 74 <value>cn/com/sengis/bean/Roles.hbm.xml</value> 75 <value>cn/com/sengis/bean/Users.hbm.xml</value> 76 </list> 77 </property> 78 </bean> 79 <bean id="transactionManager" class="org.springframework.orm.hibernate3.HibernateTransactionManager"> 80 <property name="sessionFactory"> 81 <ref local="sessionFactory"/> 82 </property> 83 </bean> 84 <tx:annotation-driven transaction-manager="transactionManager" /> 85 <!-- 配置事务增强处理Bean,指定事务管理器 --> 86 <tx:advice id="txAdvice" transaction-manager="transactionManager"> 87 <!-- 用于配置详细的事务语义 --> 88 <tx:attributes> 89 <!-- 所有以'get'开头的方法是read-only的 --> 90 <tx:method name="get*" read-only="true"/> 91 <!-- 其他方法使用默认的事务设置 --> 92 <tx:method name="*" rollback-for="java.lang.Exception" propagation="REQUIRED"/> 93 </tx:attributes> 94 </tx:advice> 95 96 97 <aop:config> 98 <!-- 配置一个切入点,在匹配条件下应用事务 99 两个Bean的所有方法的执行 --> 100 <aop:pointcut id="pointcut" 101 expression="execution(* cn.com.sengis.service.*.*(..))"/> 102 <!-- 指定在pointcut切入点应用txAdvice事务增强处理 --> 103 <aop:advisor advice-ref="txAdvice" 104 pointcut-ref="pointcut"/> 105 </aop:config> 106 107 <bean id="myServiceBean" class="cn.com.sengis.service.ServiceBean"></bean> 108 <bean id="myAction" class="cn.com.sengis.action.MyAction"> 109 <property name="serviceBean"> 110 <ref bean="myServiceBean"/> 111 </property> 112 </bean> 113 114 <!-- 整合DWR --> 115 116 <!-- 方法一 --> 117 <!-- *********************************************************************** --> 118 <!-- <dwr:configuration> --> 119 <!-- <dwr:convert type="bean" class="com.lhq.User" /> --> 120 <!-- <dwr:convert type="bean" class="org.directwebremoting.ScriptSession" /> --> 121 <!-- </dwr:configuration> --> 122 123 124 <!-- <bean id="sayHello" class="cn.com.sengis.service.SayHello"> --> 125 <!-- <dwr:remote javascript="sayHello"> --> 126 <!-- <dwr:include method="sayHello" /> --> 127 <!-- </dwr:remote> --> 128 <!-- </bean> --> 129 <!-- <bean id="ChatManager" class="com.lhq.ChatManager"> --> 130 <!-- <dwr:remote javascript="ChatManager"> --> 131 <!-- <dwr:include method="updateUsersList"/> --> 132 <!-- <dwr:include method="setScriptSessionFlag"/> --> 133 <!-- <dwr:include method="getScriptSession"/> --> 134 <!-- <dwr:include method="send"/> --> 135 <!-- </dwr:remote> --> 136 <!-- </bean> --> 137 <!-- *********************************************************************** --> 138 139 <!-- 方法二(注解的方式) --> 140 <dwr:configuration> 141 <dwr:convert type="bean" class="cn.com.sengis.service.User" /> 142 <dwr:convert type="bean" class="org.directwebremoting.ScriptSession" /> 143 </dwr:configuration> 144 <dwr:annotation-scan base-package="cn.com.sengis" scanDataTransferObject="true" scanRemoteProxy="true" /> 145 146 147 148 149 150 </beans>
dao.xml
<?xml version="1.0" encoding="UTF-8"?> <!-- 指定Spring配置文件的Schema信息 --> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd" default-lazy-init="true"> <!-- 配置DAO组件的模板 --> <bean id="daoTemplate" abstract="true" p:sessionFactory-ref="sessionFactory"/> <bean id="hibernateDao" class="cn.com.sengis.dao.impl.HibernateDaoImpl" parent="daoTemplate"></bean> <bean id="usersDao" class="cn.com.sengis.dao.impl.UsersDaoImpl" parent="daoTemplate"></bean> <bean id="resourcesDao" class="cn.com.sengis.dao.impl.ResourcesDaoImpl" parent="daoTemplate"></bean> <bean id="rolesDao" class="cn.com.sengis.dao.impl.RolesDaoImpl" parent="daoTemplate"></bean> </beans>
applicationContext-security.xml
<?xml version="1.0" encoding="UTF-8"?> <beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd"> <debug/> <!-- <global-method-security> --> <!-- Element 这个元素用来在你的应用程序中启用基于安全的注解(通过在这个元素中设置响应的属性), --> <!-- 也可以用来声明将要应用在你的实体application context中的安全切点组。 --> <!-- <global-method-security secured-annotations="enabled" jsr250-annotations="enabled"/> --> <!-- protect-pointcut是非常强大的,它让你可以用简单的声明对多个bean的进行安全声明。 参考下面的例子: Java代码 --> <!-- <global-method-security> --> <!-- <protect-pointcut expression="execution(* com.mycompany.*Service.*(..))" access="ROLE_USER"/> --> <!-- </global-method-security> 这样会保护application context中的符合条件的bean的所有方法 --> <!-- 不要过滤图片等静态资源,其中**代表可以跨越目录,*不可以跨越目录。 --> <!-- <intercept-url pattern="/**/*.jpg" filters="none" /> --> <!-- <intercept-url pattern="/**/*.png" filters="none" /> --> <!-- <intercept-url pattern="/**/*.gif" filters="none" /> --> <!-- <intercept-url pattern="/**/*.css" filters="none" /> --> <!-- <intercept-url pattern="/**/*.js" filters="none" /> --> <!-- 这些请求不用过滤 --> <http pattern="/**/*.js" security="none"/> <http pattern="/**/*.css" security="none"/> <http pattern="/**/*.gif**" security="none"></http> <http pattern="/**/*.jpg" security="none"/> <http pattern="/login.jsp" security="none"/> <http use-expressions="true" entry-point-ref="authenticationProcessingFilterEntryPoint" access-denied-page="/a.jsp"> <logout invalidate-session="false" logout-success-url="/login.jsp" logout-url="/j_spring_security_logout"/> <!-- 实现免登陆验证 --> <!-- "记住我"功能,采用持久化策略(将用户的登录信息存放在数据库表中) --> <!-- <remember-me data-source-ref="dataSource" /> --> <remember-me /> <!-- session-management是针对session的管理. 这里可以不配置. 如有需求可以配置. --> <!-- id登陆唯一. 后登陆的账号会挤掉第一次登陆的账号 error-if-maximum-exceeded="true" 禁止2次登陆; session-fixation-protection="none" 防止伪造sessionid攻击. 用户登录成功后会销毁用户当前的session. 创建新的session,并把用户信息复制到新session中. --> <session-management invalid-session-url="/timeout.jsp"> <concurrency-control max-sessions="1" error-if-maximum-exceeded="true" expired-url="/login.jsp"></concurrency-control> </session-management> <!-- 定制自己的过滤器 --> <custom-filter ref="loginFilter" position="FORM_LOGIN_FILTER" /> <custom-filter ref="securityFilter" before="FILTER_SECURITY_INTERCEPTOR"/> </http> <!-- 登录验证器 --> <beans:bean id="loginFilter" class="cn.com.sengis.security.MyUsernamePasswordAuthenticationFilter"> <!-- 处理登录 --> <beans:property name="filterProcessesUrl" value="/j_spring_security_check"></beans:property> <beans:property name="authenticationSuccessHandler" ref="loginLogAuthenticationSuccessHandler"></beans:property> <beans:property name="authenticationFailureHandler" ref="simpleUrlAuthenticationFailureHandler"></beans:property> <beans:property name="authenticationManager" ref="myAuthenticationManager"></beans:property> <beans:property name="usersDao" ref="usersDao"></beans:property> </beans:bean> <beans:bean id="loginLogAuthenticationSuccessHandler" class="org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler"> <!-- 登录成功后的页面 --> <beans:property name="defaultTargetUrl" value="/index.jsp"></beans:property> </beans:bean> <beans:bean id="simpleUrlAuthenticationFailureHandler" class="org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler"> <beans:property name="defaultFailureUrl" value="/login.jsp"></beans:property> </beans:bean> <!-- 认证过滤器 --> <beans:bean id="securityFilter" class="cn.com.sengis.security.MySecurityFilter"> <!-- 用户拥有的权限 --> <beans:property name="authenticationManager" ref="myAuthenticationManager" /> <!-- 用户是否拥有所请求资源的权限 --> <beans:property name="accessDecisionManager" ref="myAccessDecisionManager" /> <!-- 资源与权限对应关系 --> <beans:property name="securityMetadataSource" ref="mySecurityMetadataSource" /> </beans:bean> <!-- 实现了UserDetailsService的Bean --> <authentication-manager alias="myAuthenticationManager"> <authentication-provider user-service-ref="myUserDetailServiceImpl"> <!-- <password-encoder ref="passwordEncoder"> --> <!-- <salt-source user-property="username"/> --> <!-- </password-encoder> --> </authentication-provider> </authentication-manager> <beans:bean id="myAccessDecisionManager" class="cn.com.sengis.security.MyAccessDecisionManager"></beans:bean> <beans:bean id="mySecurityMetadataSource" class="cn.com.sengis.security.MySecurityMetadataSource"> <beans:constructor-arg name="resourcesDao" ref="resourcesDao"></beans:constructor-arg> </beans:bean> <beans:bean id="myUserDetailServiceImpl" class="cn.com.sengis.security.MyUserDetailServiceImpl"> <beans:property name="usersDao" ref="usersDao"></beans:property> </beans:bean> <!-- 未登录的切入点 --> <beans:bean id="authenticationProcessingFilterEntryPoint" class="org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint"> <beans:property name="loginFormUrl" value="/login.jsp"></beans:property> </beans:bean> </beans:beans>
jdbc.properties
connection.driver_class=com.mysql.jdbc.Driver connection.url=jdbc:mysql://localhost:3306/spring_security?useUnicode=true&characterEncoding=UTF-8 connection.username=root connection.password=1234 proxool.maximum.connection.count=100 proxool.minimum.connection.count=5 proxool.initialPoolSize=1 proxool.maxIdleTime=200
log4j.properties
# For JBoss: Avoid to setup Log4J outside $JBOSS_HOME/server/default/deploy/log4j.xml!
# For all other servers: Comment out the Log4J listener in web.xml to activate Log4J.
log4j.rootLogger=INFO, stdout, logfile
log4j.appender.stdout=org.apache.log4j.ConsoleAppender
log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
log4j.appender.stdout.layout.ConversionPattern=%d %p [%c] - %m%n
log4j.appender.logfile=org.apache.log4j.RollingFileAppender
log4j.appender.logfile.File=${petstore.root}/WEB-INF/petstore.log
log4j.appender.logfile.MaxFileSize=512KB
# Keep three backup files.
log4j.appender.logfile.MaxBackupIndex=3
# Pattern to output: date priority [category] - message
log4j.appender.logfile.layout=org.apache.log4j.PatternLayout
log4j.appender.logfile.layout.ConversionPattern=%d %p [%c] - %m%n
struts.xml
<?xml version="1.0" encoding="UTF-8" ?> <!DOCTYPE struts PUBLIC "-//Apache Software Foundation//DTD Struts Configuration 2.3//EN" "http://struts.apache.org/dtds/struts-2.3.dtd"> <struts> <!-- 指定Web应用的默认编码集,相当于调用HttpServletRequest的setCharacterEncoding方法 --> <constant name="struts.i18n.encoding" value="utf-8"/> <!-- 该属性指定需要Struts 2处理的请求后缀,该属性的默认值是action,即所有匹配*.action的请求都由Struts2处理。 如果用户需要指定多个请求后缀,则多个后缀之间以英文逗号(,)隔开。 --> <constant name="struts.action.extension" value="action"/> <!-- 设置浏览器是否缓存静态内容,默认值为true(生产环境下使用),开发阶段最好关闭 --> <constant name="struts.serve.static.browserCache" value="false"/> <!-- 当struts的配置文件修改后,系统是否自动重新加载该文件,默认值为false(生产环境下使用),开发阶段最好打开 --> <constant name="struts.configuration.xml.reload" value="true"/> <!-- 开发模式下使用,这样可以打印出更详细的错误信息 --> <constant name="struts.devMode" value="true" /> <!-- struts的action交由spring创建和管理 --> <constant name="struts.objectFactory" value="spring" /> <package name="stu" namespace="/stu" extends="struts-default"> <action name="mystu" class="cn.com.sengis.action.MyAction"> <result name="success">/success.jsp</result> </action> </package> <package name="test" namespace="" extends="struts-default"> <action name="notice" class="cn.com.sengis.action.noticeAction"> <result>/noticeList.jsp</result> <result name="input">/noticeList.jsp</result> </action> <action name="test" class="cn.com.sengis.action.TestAction"> <result></result> </action> </package> </struts>
sql:
CREATE TABLE `users` ( `id` int(11) NOT NULL AUTO_INCREMENT, `enable` int(11) DEFAULT NULL, `password` varchar(255) DEFAULT NULL, `account` varchar(255) DEFAULT NULL, PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8; CREATE TABLE `roles` ( `id` int(11) NOT NULL AUTO_INCREMENT, `enable` int(11) DEFAULT NULL, `name` varchar(255) DEFAULT NULL, PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8; CREATE TABLE `resources` ( `id` int(11) NOT NULL AUTO_INCREMENT, `url` varchar(255) DEFAULT NULL, `priority` int(11) DEFAULT NULL, `type` int(11) DEFAULT NULL, `name` varchar(255) DEFAULT NULL, `memo` varchar(255) DEFAULT NULL, PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=4 DEFAULT CHARSET=utf8; CREATE TABLE `roles_resources` ( `rsid` int(11) NOT NULL, `rid` int(11) NOT NULL, PRIMARY KEY (`rsid`,`rid`), KEY `FKAF06BF234B9B2DA4` (`rid`), KEY `FKAF06BF23B726B61B` (`rsid`), CONSTRAINT `FKAF06BF234B9B2DA4` FOREIGN KEY (`rid`) REFERENCES `roles` (`id`), CONSTRAINT `FKAF06BF23B726B61B` FOREIGN KEY (`rsid`) REFERENCES `resources` (`id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8; CREATE TABLE `users_roles` ( `rid` int(11) NOT NULL, `uid` int(11) NOT NULL, PRIMARY KEY (`uid`,`rid`), KEY `FKF6CCD9C64BC73832` (`uid`), KEY `FKF6CCD9C64B9B2DA4` (`rid`), CONSTRAINT `FKF6CCD9C64B9B2DA4` FOREIGN KEY (`rid`) REFERENCES `roles` (`id`), CONSTRAINT `FKF6CCD9C64BC73832` FOREIGN KEY (`uid`) REFERENCES `users` (`id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
演示截图
完整源码下载地址http://download.csdn.net/detail/ch746848281/4503498