apache shiro 自定义filter

public class MyFilter extends AuthorizationFilter {

@Override
protected boolean isAccessAllowed(ServletRequest request,
ServletResponse response, Object mappedValue) throws Exception {
Subject subject =  SecurityUtils.getSubject();

        String[] rolesArray = (String[]) mappedValue; 

        if (rolesArray == null || rolesArray.length == 0) { 
            return true; 
        } 
        for(int i=0;i<rolesArray.length;i++){ 
            if(subject.hasRole(rolesArray[i])){ 
                return true; 
            } 
        } 
       
        return false; 
}

}