Posted by Anonymous Coward on Thu 28th Aug 07:58 Viewed: 12 times | Last viewed: Fri 21th Nov 16:12 (download )

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN 2.0//EN" "http://www.springframework.org/dtd/spring-beans-2.0.dtd">

<bean id="filterChainProxy" class="org.acegisecurity.util.FilterChainProxy">
        <property name="filterInvocationDefinitionSource">
            <value>
                <![CDATA[
                  CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                  PATTERN_TYPE_APACHE_ANT
                  /**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterSecurityInterceptor
                ]]>
            </value>
        </property>
    </bean>

<bean id="httpSessionContextIntegrationFilter"
          class="org.acegisecurity.context.HttpSessionContextIntegrationFilter">
        <property name="allowSessionCreation">
            <value>false</value>
        </property>
    </bean>

<bean id="logoutFilter"
          class="org.acegisecurity.ui.logout.LogoutFilter">
        <constructor-arg value="/home.htm"/>
        <constructor-arg>
            <list>
                <ref bean="rememberMeServices"/>
                <bean class="org.acegisecurity.ui.logout.SecurityContextLogoutHandler"/>
            </list>
        </constructor-arg>
    </bean>

<bean id="userDetailsService"
          class="org.acegisecurity.userdetails.jdbc.JdbcDaoImpl">
        <property name="dataSource" ref="globalonepool"/>
        <property name="usersByUsernameQuery">
            <value>
                select user_id as username,password, enabled
                from users_id
                where user_id=?
            </value>
        </property>
        <property name="authoritiesByUsernameQuery">
            <value>
                select
                uc.*,
                us.*,
                ch.*,
                ch.*,
                hs.*,
                ur.*
                from
                user_countries as uc,
                user_cities as us,
                chains as ch,
                shops as hs,
                users_id as ui,
                user_roles as ur
                where
                ui.country_code=uc.code
                and ui.city_code=us.code
                and ui.chain_code=ch.code
                and ui.shop_code=hs.code
                and ur.code=ui.user_role
                and ui.usr_id=?
            </value>
        </property>
    </bean>

<bean id="concurrentSessionFilter"
          class="org.acegisecurity.concurrent.ConcurrentSessionFilter">
        <property name="sessionRegistry" ref="sessionRegistry"/>
        <property name="expiredUrl" value="/home.htm"/>
    </bean>

<bean id="anonymousProcessingFilter" class="org.acegisecurity.providers.anonymous.AnonymousProcessingFilter">
        <property name="key">
            <value>foobar</value>
        </property>
        <property name="userAttribute">
            <value>anonymousUser,ROLE_ANONYMOUS</value>
        </property>
    </bean>
    <bean id="anonymousAuthenticationProvider"
          class="org.acegisecurity.providers.anonymous.AnonymousAuthenticationProvider">
        <property name="key">
            <value>foobar</value>
        </property>
    </bean>

<bean id="filterSecurityInterceptor"
          class="org.acegisecurity.intercept.web.FilterSecurityInterceptor">
        <property name="authenticationManager" ref="authenticationManager"/>
        <property name="accessDecisionManager" ref="accessDecisionManager"/>
        <property name="objectDefinitionSource">
            <value>
                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /ri.htm=ROLE_RI
            </value>
        </property>
    </bean>

<bean id="accessDecisionManager"
          class="org.acegisecurity.vote.UnanimousBased">
        <property name="allowIfAllAbstainDecisions" value="false"/>
        <property name="decisionVoters">
            <list>
                <ref bean="roleVoter"/>
            </list>
        </property>
    </bean>

</beans>

Submit a correction or amendment below.

Code: To ensure legibility, keep your code lines under 80 characters long.
Include comments to indicate what you need feedback on.

Use syntax highlighting

To highlight particular lines, prefix each line with @@

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN 2.0//EN" "http://www.springframework.org/dtd/spring-beans-2.0.dtd">

<beans>
    <!--Acegi authentications beans-->

    <!--Acegi filter -->
    <bean id="filterChainProxy" class="org.acegisecurity.util.FilterChainProxy">
        <property name="filterInvocationDefinitionSource">
            <value>
                <![CDATA[
                  CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                  PATTERN_TYPE_APACHE_ANT
                  /**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterSecurityInterceptor
                ]]>
            </value>
        </property>
    </bean>


    <bean id="httpSessionContextIntegrationFilter"
          class="org.acegisecurity.context.HttpSessionContextIntegrationFilter">
        <property name="allowSessionCreation">
            <value>false</value>
        </property>
    </bean>


    <!--Application process filter-->

    <bean id="authenticationProcessingFilter" class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter">
        <property name="authenticationManager" ref="authenticationManager"/>
        <property name="authenticationFailureUrl" value="/auth/error.jsp"/>
        <property name="defaultTargetUrl" value="/"/>
        <property name="filterProcessesUrl" value="/j_acegi_security_check"/>
    </bean>

    <bean id="authenticationManager" class="org.acegisecurity.providers.ProviderManager">
        <property name="providers">
            <list>
                <ref bean="daoAuthenticationProvider"/>
            </list>
        </property>
    </bean>

    <bean id="daoAuthenticationProvider" class="org.acegisecurity.providers.dao.DaoAuthenticationProvider">
        <property name="userDetailsService" ref="jdbcDaoImpl"/>
    </bean>

    <bean id="jdbcDaoImpl" class="org.acegisecurity.userdetails.jdbc.JdbcDaoImpl">
        <property name="dataSource" ref="globepool"/>
    </bean>

    <bean id="exceptionTranslationFilter" class="org.acegisecurity.ui.ExceptionTranslationFilter">
        <property name="authenticationEntryPoint">
            <ref local="authenticationProcessingFilterEntryPoint"/>
        </property>
        <property name="accessDeniedHandler">
            <bean class="org.acegisecurity.ui.AccessDeniedHandlerImpl">
                <property name="errorPage" value="/auth/error.jsp"/>
            </bean>
        </property>
    </bean>
    <bean id="authenticationProcessingFilterEntryPoint"
          class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilterEntryPoint">
        <property name="loginFormUrl" value="/auth/login.jsp"/>
        <property name="forceHttps" value="false"/>
    </bean>

    <!--  ====== -->
    <bean id="logoutFilter"
          class="org.acegisecurity.ui.logout.LogoutFilter">
        <constructor-arg value="/home.htm"/>
        <constructor-arg>
            <list>
                <ref bean="rememberMeServices"/>
                <bean class="org.acegisecurity.ui.logout.SecurityContextLogoutHandler"/>
            </list>
        </constructor-arg>
    </bean>


    <bean id="rememberMeServices"
          class="org.acegisecurity.ui.rememberme.TokenBasedRememberMeServices">
        <property name="userDetailsService" ref="userDetailsService"/>
        <property name="key" value="resourceInventory"/>
    </bean>

    <bean id="userDetailsService"
          class="org.acegisecurity.userdetails.jdbc.JdbcDaoImpl">
        <property name="dataSource" ref="globalonepool"/>
        <property name="usersByUsernameQuery">
            <value>
                select user_id as username,password, enabled
                from users_id
                where user_id=?
            </value>
        </property>
        <property name="authoritiesByUsernameQuery">
            <value>
                select
                uc.*,
                us.*,
                ch.*,
                ch.*,
                hs.*,
                ur.*
                from
                user_countries as uc,
                user_cities as us,
                chains as ch,
                shops as hs,
                users_id as ui,
                user_roles as ur
                where
                ui.country_code=uc.code
                and ui.city_code=us.code
                and ui.chain_code=ch.code
                and ui.shop_code=hs.code
                and ur.code=ui.user_role
                and ui.usr_id=?
            </value>
        </property>
    </bean>


    <!--  =========== -->
    <!--  CONCURRENCY -->
    <!--  =========== -->
    <bean id="concurrentSessionFilter"
          class="org.acegisecurity.concurrent.ConcurrentSessionFilter">
        <property name="sessionRegistry" ref="sessionRegistry"/>
        <property name="expiredUrl" value="/home.htm"/>
    </bean>

    <bean id="concurrentSessionController"
          class="org.acegisecurity.concurrent.ConcurrentSessionControllerImpl">
        <property name="maximumSessions" value="1"/>
        <property name="sessionRegistry" ref="sessionRegistry"/>
        <property name="exceptionIfMaximumExceeded" value="true"/>
    </bean>

    <bean id="sessionRegistry"
          class="org.acegisecurity.concurrent.SessionRegistryImpl"/>


    <bean id="anonymousProcessingFilter" class="org.acegisecurity.providers.anonymous.AnonymousProcessingFilter">
        <property name="key">
            <value>foobar</value>
        </property>
        <property name="userAttribute">
            <value>anonymousUser,ROLE_ANONYMOUS</value>
        </property>
    </bean>
    <bean id="anonymousAuthenticationProvider"
          class="org.acegisecurity.providers.anonymous.AnonymousAuthenticationProvider">
        <property name="key">
            <value>foobar</value>
        </property>
    </bean>

    <!--  =========================== -->
    <bean id="filterSecurityInterceptor"
          class="org.acegisecurity.intercept.web.FilterSecurityInterceptor">
        <property name="authenticationManager" ref="authenticationManager"/>
        <property name="accessDecisionManager" ref="accessDecisionManager"/>
        <property name="objectDefinitionSource">
            <value>
                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /ri.htm=ROLE_RI
            </value>
        </property>
    </bean>

    <!--  ============= -->
    <!--  AUTHORIZATION -->
    <!--  ============= -->
    <bean id="accessDecisionManager"
          class="org.acegisecurity.vote.UnanimousBased">
        <property name="allowIfAllAbstainDecisions" value="false"/>
        <property name="decisionVoters">
            <list>
                <ref bean="roleVoter"/>
            </list>
        </property>
    </bean>

    <bean id="roleVoter" class="org.acegisecurity.vote.RoleVoter"/>


</beans>

Image

Name
Remember my name in a cookie
Channel or nick (i.e. ##wicket, ##swing, ##java)

Actions

Recent Posts

Credits

Links

Posted by Anonymous Coward on Thu 28th Aug 07:58 Viewed: 12 times | Last viewed: Fri 21th Nov 16:12 (download )