@Override
	public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) throws AccessDeniedException, InsufficientAuthenticationException
	{
		// TODO Auto-generated method stub

		if (configAttributes == null)
		{
			return;
		}

		User user = (User) authentication.getPrincipal();
		System.out.println("this object value is: " + user.toString());
		Iterator<ConfigAttribute> iterator = configAttributes.iterator();

		while (iterator.hasNext())
		{
			SecurityConfig config = (SecurityConfig) iterator.next();

			if (config.getAttribute().equals(""))
			{
				return;
			}
			else if (config.getAttribute().equals("/admin/superAdmin.jsp"))
			{
				throw new AccessDeniedException(" 没有权限访问！ ");
			}
		}
	}