dent.core.ks-standard-sec.2.0.3-cm.source-code.ks-spring-security.xml Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of ks-standard-sec Show documentation
The newest version!
<?xml version="1.0" encoding="UTF-8"?>
<!-- Copyright 2010 The Kuali Foundation Licensed under the Educational Community 
	License, Version 2.0 (the "License"); you may not use this file except in 
	compliance with the License. You may obtain a copy of the License at http://www.osedu.org/licenses/ECL-2.0 
	Unless required by applicable law or agreed to in writing, software distributed 
	under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES 
	OR CONDITIONS OF ANY KIND, either express or implied. See the License for 
	the specific language governing permissions and limitations under the License. -->


<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:security="http://www.springframework.org/schema/security"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">

	<import resource="ksss-auth-common.xml" />

    <security:http pattern="/logout.html*" security="none" />
    <security:http pattern="/services/**" security="none" />
    <security:http pattern="/favicon.ico" security="none" />
    <security:http pattern="/login.jsp*" security="none" />
    <security:http pattern="/index.jsp*" security="none"/>
    <!-- resource files (css, scripts, images) can bypass security: -->
    <security:http pattern="\S*?\.(css|js|png|gif|jpg)$" request-matcher="ciRegex" security="none" />
    <!-- enable KS Kitchen Sink pages to bypass login.jsp: -->
    <security:http pattern="/kr-krad/kitchensink*" security="none" />

	<security:http auto-config="false">
		<security:form-login login-page="/login.jsp" />
		<security:custom-filter ref="ksLogoutFilter"
			position="LOGOUT_FILTER" />
		<security:custom-filter ref="authenticationGwtRpcFilter"
			after="CAS_FILTER" />
		<security:intercept-url pattern="/admin/**" access="ROLE_KS_ADMIN"/>
		<!-- used for backdoor login 		-->
		<security:intercept-url pattern="/j_spring_security_switch_user*" access="ROLE_KS_BACKDOOR"/>
		<security:intercept-url pattern="/org.kuali.student.lum.lu.ui.main.LUMMain/**" access="ROLE_KS_USER,ROLE_KS_ADMIN"/>
		<security:intercept-url pattern="/portal*" access="ROLE_KS_USER,ROLE_KS_ADMIN"/>
		<security:intercept-url pattern="/kew/**" access="ROLE_KS_USER,ROLE_KS_ADMIN"/>
        <security:intercept-url pattern="/**" access="ROLE_KS_USER" />
	</security:http>

	<bean id="ksLogoutFilter" class="org.kuali.student.security.filter.KSLogoutFilter" />

	<!-- List of Custom Providers that can be registered with the default authentication 
		manager -->

	<security:authentication-manager>
		<security:authentication-provider ref="daoAuthenticationProvider" />
		<security:authentication-provider ref="daoAuthenticationProvider2" />
	</security:authentication-manager>
		
	<bean id="daoAuthenticationProvider"
		class="org.kuali.student.security.kim.KimAuthenticationProvider">
		<property name="userDetailsService" ref="ksRiceUserDetailsService" />
	</bean>

	<bean id="daoAuthenticationProvider2"
		class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">
		<property name="userDetailsService" ref="ksUserDetailsService" />
	</bean>

</beans>