<?xml version="1.0" encoding="UTF-8"?>

<!--
    Test File for use in validating behaviour in an XML editor
-->

<b:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:b="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:aop="http://www.springframework.org/schema/aop"
    xmlns:context="http://www.springframework.org/schema/context"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                        http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd
                        http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd
                        http://www.springframework.org/schema/security ../../main/resources/org/springframework/security/config/spring-security-3.0.xsd">

    <global-method-security run-as-manager-ref="myRunAsManager">
        <pre-post-annotation-handling>
            <invocation-attribute-factory ref=""/>
            <pre-invocation-advice ref=""/>
            <post-invocation-advice ref=""/>
        </pre-post-annotation-handling>
    </global-method-security>

    <filter-security-metadata-source>
        <intercept-url pattern=""/>
    </filter-security-metadata-source>


    <http>
        <access-denied-handler error-page="/go-away.html"/>
        <intercept-url pattern="/**" access="ROLE_USER" />

        <form-login />
        <openid-login/>
        <anonymous />
        <http-basic />
        <concurrent-session-control expired-url="/session-expired" max-sessions="1" session-registry-alias="sessionRegistry"/>
        <logout invalidate-session="true" logout-url="/logout" logout-success-url="/you-have-logged-out.htm"/>
    </http>
</b:beans>
