How to design the system authority management of javaweb project?

There are two design methods for system authority management of java web project:

Method 1: SpringMVC integrates Shiro (Shiro is a powerful rights management framework).

Reference:/content/14/0529/09/1298474 _ 381916189.shtml.

Method 2: Role-based access control

Role-based access control

The first is role-based access control, all user access will be filtered, and then access rights will be analyzed and authenticated! The focus of authority, the design of the table.

Generally, there are three tables with user-defined names. User table (users), role table (roles) and resource table (resources)

The user table is nothing special, it's very simple. The key is the role table and resource table.