|
@@ -11,38 +11,39 @@
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
|
|
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.xsd">
|
|
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.xsd">
|
|
-
|
|
|
|
- <annotation-driven/>
|
|
|
|
-
|
|
|
|
- <http auto-config="true">
|
|
|
|
|
|
+
|
|
|
|
+ <annotation-driven/>
|
|
|
|
+
|
|
|
|
+ <http auto-config="true">
|
|
<intercept-url pattern="/secure/extreme/**" access="ROLE_SUPERVISOR"/>
|
|
<intercept-url pattern="/secure/extreme/**" access="ROLE_SUPERVISOR"/>
|
|
<intercept-url pattern="/secure/**" access="IS_AUTHENTICATED_REMEMBERED" />
|
|
<intercept-url pattern="/secure/**" access="IS_AUTHENTICATED_REMEMBERED" />
|
|
- <!-- Disable web URI authorization, as we're using <annotation-driven> and have @Secured the services layer instead
|
|
|
|
- <intercept-url pattern="/listAccounts.html" access="IS_AUTHENTICATED_REMEMBERED" />
|
|
|
|
- <intercept-url pattern="/post.html" access="ROLE_TELLER" />
|
|
|
|
- -->
|
|
|
|
|
|
+ <!-- Disable web URI authorization, as we're using <annotation-driven> and have @Secured the services layer instead
|
|
|
|
+ <intercept-url pattern="/listAccounts.html" access="IS_AUTHENTICATED_REMEMBERED" />
|
|
|
|
+ <intercept-url pattern="/post.html" access="ROLE_TELLER" />
|
|
|
|
+ -->
|
|
<intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />
|
|
<intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />
|
|
-
|
|
|
|
- <!-- All of this is unnecessary if auto-config="true"
|
|
|
|
- <form-login />
|
|
|
|
|
|
+
|
|
|
|
+ <!-- All of this is unnecessary if auto-config="true"
|
|
|
|
+ <form-login />
|
|
<anonymous />
|
|
<anonymous />
|
|
<http-basic />
|
|
<http-basic />
|
|
- <logout />
|
|
|
|
- <remember-me />
|
|
|
|
- <servlet-api-integration />
|
|
|
|
- -->
|
|
|
|
-
|
|
|
|
|
|
+ <logout />
|
|
|
|
+ <remember-me />
|
|
|
|
+ <servlet-api-integration />
|
|
|
|
+ -->
|
|
|
|
+
|
|
<concurrent-session-control max-sessions="1" exception-if-maximum-exceeded="true"/>
|
|
<concurrent-session-control max-sessions="1" exception-if-maximum-exceeded="true"/>
|
|
|
|
|
|
- </http>
|
|
|
|
-
|
|
|
|
- <repository>
|
|
|
|
- <user-service hash="md5-hex">
|
|
|
|
- <user name="rod" password="a564de63c2d0da68cf47586ee05984d7" authorities="ROLE_SUPERVISOR,ROLE_USER,ROLE_TELLER" /> <!-- koala -->
|
|
|
|
- <user name="dianne" password="65d15fe9156f9c4bbffd98085992a44e" authorities="ROLE_USER,ROLE_TELLER" /> <!-- emu -->
|
|
|
|
- <user name="scott" password="2b58af6dddbd072ed27ffc86725d7d3a" authorities="ROLE_USER" /> <!-- wombat -->
|
|
|
|
- <user name="peter" password="22b5c9accc6e1ba628cedc63a72d57f8" authorities="ROLE_USER" /> <!-- opal -->
|
|
|
|
- </user-service>
|
|
|
|
- </repository>
|
|
|
|
|
|
+ </http>
|
|
|
|
+
|
|
|
|
+ <authentication-provider>
|
|
|
|
+ <password-encoder hash="md5"/>
|
|
|
|
+ <user-service>
|
|
|
|
+ <user name="rod" password="a564de63c2d0da68cf47586ee05984d7" authorities="ROLE_SUPERVISOR,ROLE_USER,ROLE_TELLER" /> <!-- koala -->
|
|
|
|
+ <user name="dianne" password="65d15fe9156f9c4bbffd98085992a44e" authorities="ROLE_USER,ROLE_TELLER" /> <!-- emu -->
|
|
|
|
+ <user name="scott" password="2b58af6dddbd072ed27ffc86725d7d3a" authorities="ROLE_USER" /> <!-- wombat -->
|
|
|
|
+ <user name="peter" password="22b5c9accc6e1ba628cedc63a72d57f8" authorities="ROLE_USER" /> <!-- opal -->
|
|
|
|
+ </user-service>
|
|
|
|
+ </authentication-provider>
|
|
|
|
|
|
</beans:beans>
|
|
</beans:beans>
|