security update

This commit is contained in:
Keith Donald
2008-06-05 21:11:24 +00:00
parent 3b68951ca3
commit 990c14a981
3 changed files with 3 additions and 16 deletions

View File

@@ -9,15 +9,8 @@
http://www.springframework.org/schema/security/spring-security-2.0.2.xsd">
<!-- Configure Spring Security -->
<security:http auto-config="true" >
<!-- Restrict URLs based on role -->
<security:intercept-url pattern="/spring/login*" access="ROLE_ANONYMOUS" />
<security:intercept-url pattern="/spring/logoutSuccess*" access="ROLE_ANONYMOUS" />
<security:intercept-url pattern="/spring/logout*" access="ROLE_USER" />
<!-- Override default login and logout pages -->
<security:form-login login-page="/spring/login" login-processing-url="/spring/loginProcess" default-target-url="/spring/main" />
<security:http auto-config="true">
<security:form-login login-page="/spring/login" login-processing-url="/spring/loginProcess" default-target-url="/spring/main" authentication-failure-url="/spring/login?login_error=1" />
<security:logout logout-url="/spring/logout" logout-success-url="/spring/logoutSuccess" />
</security:http>

View File

@@ -47,7 +47,7 @@
<dependency org="org.springframework" name="org.springframework.web" rev="2.5.4.A" conf="compile->compile"/>
<dependency org="org.springframework" name="org.springframework.web.servlet" rev="2.5.4.A" conf="compile->compile"/>
<dependency org="org.springframework.security" name="org.springframework.security" rev="2.0.2.A" conf="compile->compile"/>
<dependency org="org.springframework.security" name="org.springframework.security.taglibs" rev="2.0.0.A" conf="compile->compile"/>
<dependency org="org.springframework.security" name="org.springframework.security.taglibs" rev="2.0.2.A" conf="compile->compile"/>
<dependency org="org.springframework.webflow" name="org.springframework.js" rev="latest.integration" conf="compile->compile"/>
<dependency org="org.springframework.webflow" name="org.springframework.webflow" rev="latest.integration" conf="compile->compile"/>

View File

@@ -10,12 +10,6 @@
<!-- Configure Spring Security -->
<security:http auto-config="true">
<!-- Restrict URLs based on role -->
<security:intercept-url pattern="/spring/login*" access="ROLE_ANONYMOUS" />
<security:intercept-url pattern="/spring/logoutSuccess*" access="ROLE_ANONYMOUS" />
<security:intercept-url pattern="/spring/logout*" access="ROLE_USER" />
<!-- Override default login and logout pages -->
<security:form-login login-page="/spring/login" login-processing-url="/spring/loginProcess" default-target-url="/spring/hotels/index" authentication-failure-url="/spring/login?login_error=1" />
<security:logout logout-url="/spring/logout" logout-success-url="/spring/logoutSuccess" />
</security:http>