e11114ce77
http://jira.springframework.org/browse/SEC-1023. hasPermission() now delegates to a PermissionEvaluator interface, with a default implementation provided by the Acl module. The contacts sample now uses expressions on the ContactManager interface. The permission-evaluator element on global-method-security can be used to set the instance to an AclPermissionEvaluator. If not set, all hasPermission() expressions will evaluate to 'false'.
62 lines
2.4 KiB
XML
62 lines
2.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
<beans xmlns="http://www.springframework.org/schema/beans"
|
|
xmlns:security="http://www.springframework.org/schema/security"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
|
|
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.1.xsd">
|
|
|
|
<!--
|
|
- Application context containing authentication beans.
|
|
-
|
|
- Used by all artifacts.
|
|
-
|
|
- $Id$
|
|
-->
|
|
|
|
<!-- ========= ACL SERVICE DEFINITIONS ========= -->
|
|
|
|
<bean id="aclCache" class="org.springframework.security.acls.jdbc.EhCacheBasedAclCache">
|
|
<constructor-arg>
|
|
<bean class="org.springframework.cache.ehcache.EhCacheFactoryBean">
|
|
<property name="cacheManager">
|
|
<bean class="org.springframework.cache.ehcache.EhCacheManagerFactoryBean"/>
|
|
</property>
|
|
<property name="cacheName" value="aclCache"/>
|
|
</bean>
|
|
</constructor-arg>
|
|
</bean>
|
|
|
|
<bean id="lookupStrategy" class="org.springframework.security.acls.jdbc.BasicLookupStrategy">
|
|
<constructor-arg ref="dataSource"/>
|
|
<constructor-arg ref="aclCache"/>
|
|
<constructor-arg>
|
|
<bean class="org.springframework.security.acls.domain.AclAuthorizationStrategyImpl">
|
|
<constructor-arg>
|
|
<list>
|
|
<bean class="org.springframework.security.GrantedAuthorityImpl">
|
|
<constructor-arg value="ROLE_ADMINISTRATOR"/>
|
|
</bean>
|
|
<bean class="org.springframework.security.GrantedAuthorityImpl">
|
|
<constructor-arg value="ROLE_ADMINISTRATOR"/>
|
|
</bean>
|
|
<bean class="org.springframework.security.GrantedAuthorityImpl">
|
|
<constructor-arg value="ROLE_ADMINISTRATOR"/>
|
|
</bean>
|
|
</list>
|
|
</constructor-arg>
|
|
</bean>
|
|
</constructor-arg>
|
|
<constructor-arg>
|
|
<bean class="org.springframework.security.acls.domain.ConsoleAuditLogger"/>
|
|
</constructor-arg>
|
|
</bean>
|
|
|
|
<bean id="aclService" class="org.springframework.security.acls.jdbc.JdbcMutableAclService">
|
|
<constructor-arg ref="dataSource"/>
|
|
<constructor-arg ref="lookupStrategy"/>
|
|
<constructor-arg ref="aclCache"/>
|
|
</bean>
|
|
|
|
</beans>
|