[parancoe] push by enricogi...@gmail.com - duplicated http section. There are issues if the sections are spread i... on 2012-02-22 01:27 GMT

[para...@googlecode.com]

Revision: c8f8e9ebabb2
Author: enricogiurin <enrico...@gmail.com>
Date: Tue Feb 21 17:26:27 2012
Log: duplicated http section. There are issues if the sections are
spread in more files
http://code.google.com/p/parancoe/source/detail?r=c8f8e9ebabb2

Modified:
/examples/basicWebAppEvolution/src/main/webapp/WEB-INF/parancoe-servlet.xml

/plugins/parancoe-plugin-springsecurity-evolution/src/main/resources/applicationContext-plugin.xml

=======================================
---
/examples/basicWebAppEvolution/src/main/webapp/WEB-INF/parancoe-servlet.xml
Sun Feb 19 18:00:42 2012
+++
/examples/basicWebAppEvolution/src/main/webapp/WEB-INF/parancoe-servlet.xml
Tue Feb 21 17:26:27 2012
@@ -2,7 +2,7 @@
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:context="http://www.springframework.org/schema/context"
xmlns:mvc="http://www.springframework.org/schema/mvc"
- xmlns:sec="http://www.springframework.org/schema/security"
+ xmlns:security="http://www.springframework.org/schema/security"
xmlns:dwr="http://www.directwebremoting.org/schema/spring-dwr"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
@@ -14,28 +14,15 @@
<context:component-scan
base-package="org.parancoe.basicWebApp.ajaxblo"/>
<context:component-scan
base-package="org.parancoe.basicWebApp.controllers"/>

-<!-- <mvc:resources mapping="/resources/**" location="/resources/" />-->
-
-<!-- <bean id="handlerMapping"
class="org.springframework.web.servlet.mvc.annotation.DefaultAnnotationHandlerMapping">
- <property name="alwaysUseFullPath" value="false"/>
- </bean>-->
+

<!-- begin security section -->
- <!-- <sec:http auto-config="true" pattern="/people/**"
use-expressions="true" access-decision-manager-ref="accessDecisionManager" >
- <sec:intercept-url pattern="*" access="hasRole('ROLE_USER')"/>
- </sec:http>
-
- <sec:http auto-config="true" pattern="/admin/**"
use-expressions="true" access-decision-manager-ref="accessDecisionManager" >
- <sec:intercept-url pattern="*" access="hasRole('ROLE_ADMIN')"/>
- </sec:http> -->
- <!--
- <sec:filter-security-metadata-source
id="pluginSecurityFilterDefinitions" lowercase-comparisons="true"
path-type="ant">
- <sec:intercept-url pattern="/r/person/**" access="ROLE_ADMIN,
ROLE_PARANCOE"/>
- <sec:intercept-url pattern="/people/**" access="ROLE_ADMIN,
ROLE_PARANCOE"/>
- <sec:intercept-url pattern="/admin/**" access="ROLE_ADMIN"/>
- <sec:intercept-url pattern="/**"
access="IS_AUTHENTICATED_ANONYMOUSLY"/>
- </sec:filter-security-metadata-source>
- -->
+
+ <!--
+ <security:http auto-config="true" pattern="/admin/**"
use-expressions="true" access-decision-manager-ref="accessDecisionManager" >
+ <security:intercept-url pattern="/admin/**"
access="hasRole('ROLE_ADMIN')"/>
+ </security:http>
+ -->
<!-- end security section -->

<!-- begin dwr section -->
=======================================
---
/plugins/parancoe-plugin-springsecurity-evolution/src/main/resources/applicationContext-plugin.xml
Sun Feb 19 18:00:42 2012
+++
/plugins/parancoe-plugin-springsecurity-evolution/src/main/resources/applicationContext-plugin.xml
Tue Feb 21 17:26:27 2012
@@ -47,14 +47,20 @@
<bean id="userDetailsService"
class="org.parancoe.plugins.securityevolution.ParancoeUserDetailsService"/>

- <security:http auto-config="true" pattern="/admin/**"
use-expressions="true" access-decision-manager-ref="accessDecisionManager" >
- <security:intercept-url pattern="*"
access="hasRole('ROLE_ADMIN')"/>
- </security:http>
-
-
- <security:http auto-config="true" pattern="/pages/**"
use-expressions="true" access-decision-manager-ref="accessDecisionManager" >
- <security:intercept-url pattern="*" access="hasRole('ROLE_USER')"/>
+ <!-- this declaration is mandatory in order to ensure correct boot of
the parancoe-webapp when this plugin is used.
+ The name 'parancoeservedpattern' is a conventional name to
represent a not existing pattern -->
+
+ <security:http auto-config="true"
pattern="/parancoeservedpattern/**" use-expressions="true"
access-decision-manager-ref="accessDecisionManager" >
+ <security:intercept-url pattern="/parancoeservedpattern/**"
access="hasRole('ROLE_ADMIN')"/>
+ </security:http>
+ <!-- WARNING: this section should be moved to the
parancoe-servlet.xml in the webapp using this plugin -->
+ <security:http auto-config="true" pattern="/admin/**"
use-expressions="true" access-decision-manager-ref="accessDecisionManager" >
+ <security:intercept-url pattern="/admin/**"
access="hasRole('ROLE_ADMIN')"/>
</security:http>
+
+
+
+