spring-boot中如何实现行级授权？

我的方法是 3 种方式实现：（使用 jpa 和休眠）

• 用户请求上下文
• 用于获取上下文的映射超类
• 用于注入用户 ID 的语句检查器

例如：

public final class UserrequestContext {
  public static String getUserId() {
    // code to retrieve your userid and throw when there is none!
    if (userId == null) throw new IllegalStateException("userid null");
    return userId;
  }
}

@mappedSuperclass
public class UserResolver {
  public static final String user_RESOLVER = "user_RESOLVER";

  @Access(AccessType.PROPERTY)
  public String getUserId() {
    return UserrequestContext.getUserId();
  }

}

@Component
public class UserInspector implements StatemenTinspector {
  @Override
  public String inspect(String statement) {
    if (statement.contains(UserResolver.user_RESOLVER)) {
       statement = statement.replace(UserResolver.user_RESOLVER,"userId = '" + UserrequestContext.getUserId() + "'" );
    }
    return sql;
  }

  @Bean
  public HibernatePropertyCustomizer hibernatePropertyCustomizer() {
    return hibernateProperies -> hibernateProperties.put("hibernate.session_factory.statement_inspector",UserInspector.class.getName());
  }
}

所以你的实体看起来像这样：

@Entity
...
@Where(clause = UserResolver.user_RESOLVER)
public class Todo extends UserResolver {
   ...
}