<?xml version="1.0" encoding="UTF-8"?>

<!--
  -
  -->

<b:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:b="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">

    <http pattern="/secured/**">
        <intercept-url pattern="/secured/*user.html" access="ROLE_USER" />
        <intercept-url pattern="/secured/admin.html" access="ROLE_ADMIN" />
        <intercept-url pattern="/secured/user/**" access="ROLE_USER" />
        <intercept-url pattern="/secured/admin/*" access="ROLE_ADMIN" />
        <intercept-url pattern="/**" access="ROLE_NO_ACCESS" />
        <form-login />
    </http>

    <http pattern="/**" security="none" />

    <authentication-manager alias="authenticationManager">
        <authentication-provider>
            <user-service id="userService">
                <user name="notused" password="notused" authorities="ROLE_0,ROLE_1"/>
            </user-service>
        </authentication-provider>
    </authentication-manager>

</b:beans>
