X-Git-Url: http://source.jalview.org/gitweb/?a=blobdiff_plain;ds=sidebyside;f=WEB-INF%2Fspring-security.xml;h=c0281f665642203671259021050fcc6ac7ef50d6;hb=39e7d79de1fd4062182d18019826cb805dea2625;hp=b5f0040fcd1d01969a9059f1aaba15c77d450fa6;hpb=de3f241669f5f2bfd8258e87cbd0b19402950f32;p=proteocache.git

diff --git a/WEB-INF/spring-security.xml b/WEB-INF/spring-security.xml
index b5f0040..c0281f6 100644
--- a/WEB-INF/spring-security.xml
+++ b/WEB-INF/spring-security.xml
@@ -1,24 +1,87 @@
 <beans:beans xmlns="http://www.springframework.org/schema/security"
-	xmlns:beans="http://www.springframework.org/schema/beans" 
+	xmlns:beans="http://www.springframework.org/schema/beans"
 	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xmlns:mvc="http://www.springframework.org/schema/mvc"
 	xsi:schemaLocation="http://www.springframework.org/schema/beans
 	http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
 	http://www.springframework.org/schema/security
-	http://www.springframework.org/schema/security/spring-security-3.1.xsd">
+	http://www.springframework.org/schema/security/spring-security-3.1.xsd
+	http://www.springframework.org/schema/mvc
+	http://www.springframework.org/schema/mvc/spring-mvc-3.2.xsd">
 
-	<http auto-config="true">
-		<intercept-url pattern="/home/*" access="ROLE_USER" />
-		<form-login login-page="/login" default-target-url="/welcome"
-			authentication-failure-url="/loginfailed" />
-		<logout logout-success-url="/logout" />
+	<http auto-config="true" pattern="/**" use-expressions="true" access-denied-page="/denied">
+		<intercept-url pattern="/stat/**" access="hasAnyRole('ROLE_USER','ROLE_LDAP_USER','ROLE_ADMIN')" />
+		<intercept-url pattern="/home**" access="hasAnyRole('ROLE_USER','ROLE_LDAP_USER','ROLE_ADMIN')" />
+		<intercept-url pattern="/sequence/**" access="hasAnyRole('ROLE_USER','ROLE_LDAP_USER','ROLE_ADMIN')" />
+		<intercept-url pattern="/admin/**" access="hasRole('ROLE_ADMIN')" />
+		<intercept-url pattern="/database/**" access="hasRole('ROLE_ADMIN')" />
+		<intercept-url pattern="/public*" access="permitAll" />
+		<intercept-url pattern="/login*" access="permitAll" />
+		<intercept-url pattern="/ldaplogin*" access="permitAll" />
+		<intercept-url pattern="/index*" access="permitAll" />
+		<intercept-url pattern="/register*" access="permitAll" />
+		<form-login login-page="/login" default-target-url="/home" authentication-failure-url="/loginfailed" />
+		<logout invalidate-session="true" logout-success-url="/logout" />
 	</http>
 
-	<authentication-manager>
+	<!-- Disabling Caching -->
+	<mvc:interceptors>
+		<beans:bean id="webContentInterceptor"
+			class="org.springframework.web.servlet.mvc.WebContentInterceptor">
+			<beans:property name="cacheSeconds" value="0" />
+			<beans:property name="useExpiresHeader" value="false" />
+			<beans:property name="useCacheControlHeader" value="true" />
+			<beans:property name="useCacheControlNoStore" value="true" />
+		</beans:bean>
+	</mvc:interceptors>
+
+	<!-- enable  -->
+	<global-method-security secured-annotations="enabled"></global-method-security>
+
+	<authentication-manager alias="LDAP">
+		<authentication-provider ref="ldapAuthProvider" />
 		<authentication-provider>
 			<user-service>
-				<user name="sherstnev" password="sasha12345" authorities="ROLE_USER" />
+				<user name="sherstnev" password="sasha" authorities="ROLE_USER" />
+				<user name="geoff" password="barton" authorities="ROLE_USER" />
+				<user name="jim" password="procter" authorities="ROLE_USER" />
+				<user name="admin" password="admin" authorities="ROLE_USER, ROLE_ADMIN" />
 			</user-service>
 		</authentication-provider>
 	</authentication-manager>
 
+	<!-- LDAP and other authentication managers -->
+	<beans:bean id="MyContextSource"
+		class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
+		<beans:constructor-arg value="ldap://ldap.lifesci.dundee.ac.uk:389" />
+		<beans:property name="userDn" value="" />
+		<beans:property name="password" value="password" />
+	</beans:bean>
+	<beans:bean id="MYgrantedAuthoritiesMapper" class="compbio.spring.security.LDAPAuthorityMapper">
+	</beans:bean>
+
+	<beans:bean id="ldapAuthProvider"
+		class="org.springframework.security.ldap.authentication.LdapAuthenticationProvider">
+		<beans:constructor-arg>
+			<beans:bean
+				class="org.springframework.security.ldap.authentication.BindAuthenticator">
+				<beans:constructor-arg ref="MyContextSource" />
+				<beans:property name="userDnPatterns">
+					<beans:list>
+						<beans:value>cn={0},ou=edir,ou=people,ou=lifesci,o=dundee</beans:value>
+					</beans:list>
+				</beans:property>
+			</beans:bean>
+		</beans:constructor-arg>
+		<beans:constructor-arg>
+			<beans:bean
+				class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator">
+				<beans:constructor-arg ref="MyContextSource" />
+				<beans:constructor-arg value="cn=group-gjb,ou=groups,ou=lifesci,o=dundee" /> <!-- Barton group members can log in only... -->
+				<beans:property name="defaultRole" value="ROLE_LDAP_USER"/> <!-- temporary solution... Currently my AuthorityMapper is not working -->
+			</beans:bean>
+		</beans:constructor-arg>
+		<!-- <beans:property name="authoritiesMapper" ref="MYgrantedAuthoritiesMapper" />--> <!-- should be used in the future -->
+	</beans:bean>
+
 </beans:beans>