<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	   xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="
           http://www.springframework.org/schema/beans
           https://www.springframework.org/schema/beans/spring-beans.xsd
           http://www.springframework.org/schema/security
           https://www.springframework.org/schema/security/spring-security.xsd">

	<security:global-method-security
		secured-annotations="enabled" />

	<!-- Configure Spring Security -->
	<security:http use-expressions="true" realm="REST HTTP Web Service" create-session="never">
		<security:http-basic />
		<security:form-login />
		<security:intercept-url pattern='/services/employee/*' access="hasRole('ROLE_REST_HTTP_USER')"  />
	</security:http>

	<!--  In this example, we are using in memory authentication. -->
	<security:authentication-manager alias="authenticationManager">
		<security:authentication-provider>
			<security:user-service properties="classpath:users.properties" />
		</security:authentication-provider>
	</security:authentication-manager>

</beans>
