Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Sample app build adjustments to remove unwanted deps such as jsp-api, tidy up use of JSTL, make sure all are using servlet 2.5 etc.

Browse Source
This commit is contained in:
Luke Taylor
2010-08-19 22:41:51 +01:00
parent 1680807470
commit c37ca1c2a9
23 changed files with 86 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
View File

@@ -19,16 +19,18 @@
-->
</global-method-security>
<http pattern="/loggedout.jsp" security="none"/>
<http use-expressions="true">
<intercept-url pattern="/secure/extreme/**" access="hasRole('ROLE_SUPERVISOR')"/>
<intercept-url pattern="/secure/**" access="isAuthenticated()" />
<!-- Disable web URI authorization, as we're using <global-method-security> and have @Secured the services layer instead
<intercept-url pattern="/listAccounts.html" access="isRememberMe()" />
<intercept-url pattern="/post.html" access="hasRole('ROLE_TELLER')" />
-->
<!--
Allow all other requests. In a real application you should
adopt a whitelisting approach where access is not allowed by default
-->
<intercept-url pattern="/**" access="permitAll" />
<form-login />
<logout />
<logout logout-success-url="/loggedout.jsp"/>
<remember-me />
<!--
Uncomment to enable X509 client authentication support