Java에서 양식 데이터의 권한 제어 및 액세스 제어를 구현하는 방법은 무엇입니까?

@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.METHOD)
public @interface Permission {
    String value();  // 权限名称
}

@Permission("view_form")
public String viewForm(Model model, HttpServletRequest request) {
    // 处理查看表单逻辑
    return "form";
}

public class PermissionInterceptor extends HandlerInterceptorAdapter {
  
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        if (handler instanceof HandlerMethod) {
            HandlerMethod handlerMethod = (HandlerMethod) handler;
            Method method = handlerMethod.getMethod();
            
            // 判断方法上是否有@Permission注解
            if (method.isAnnotationPresent(Permission.class)) {
                // 获取注解值，即权限名称
                String permissionName = method.getAnnotation(Permission.class).value();
                // 根据当前用户角色判断是否有权限
                if (!checkPermission(permissionName)) {
                    // 如果没有权限，跳转到无权限提示页面
                    response.sendRedirect("/noPermission");
                    return false;
                }
            }
        }
        
        return true;
    }

    // 检查用户是否有权限
    private boolean checkPermission(String permissionName) {
        // TODO: 根据当前用户角色判断是否有权限
        return true;
    }
}

<mvc:interceptors>
    <mvc:interceptor>
        <mvc:mapping path="/**"/>
        <bean class="com.example.PermissionInterceptor"/>
    </mvc:interceptor>
</mvc:interceptors>