shiro 注解式前提

<aop:config proxy-target-class="true"></aop:config>
<bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
　　<property name="securityManager" ref="securityManager"/>
</bean>