08 整合spring3和mybatis進行web開發之global_security_xml
<?xml version="1.0" encoding="UTF-8"?> <http access-denied-page="/accessDenied.jsp"> <!-- default-target-url="/home/load" --> <authentication-manager> </beans:beans>
posted on 2012-07-07 15:14 做強大的自己 閱讀(182) 評論(0) 編輯 收藏 所屬分類: Spring
<beans:beans xmlns=" xmlns:xsi=" xmlns:lang="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
http://www.springframework.org/schema/aop
http://www.springframework.org/schema/aop/spring-aop-3.0.xsd
http://www.springframework.org/schema/tx
http://www.springframework.org/schema/tx/spring-tx-3.0.xsd
http://www.springframework.org/schema/context
http://www.springframework.org/schema/context/spring-context-3.0.xsd
http://www.springframework.org/schema/jee
http://www.springframework.org/schema/jee/spring-jee-3.0.xsd
http://www.springframework.org/schema/lang
http://www.springframework.org/schema/lang/spring-lang-3.0.xsd
http://www.springframework.org/schema/security
<intercept-url pattern="/styles/**" filters="none" />
<intercept-url pattern="/images/**" filters="none" />
<intercept-url pattern="/scripts/**" filters="none" />
<intercept-url pattern="/index.jsp" filters="none" />
<intercept-url pattern="/login.jsp" filters="none" />
<intercept-url pattern="/accessDenied.jsp" filters="none" />
<intercept-url pattern="/role/**" access="ROLE_ADMIN" />
<intercept-url pattern="/**" access="ROLE_USER,ROLE_ADMIN" />
<form-login login-page="/login.jsp"
authentication-failure-url="/login.jsp?error=true"
default-target-url="/main.jsp"
always-use-default-target="true" />
<logout logout-success-url="/login.jsp" />
<http-basic />
</http>
<authentication-provider>
<user-service>
<user name="admin" password="1" authorities="ROLE_ADMIN" />
<user name="a" password="1" authorities="ROLE_USER" />
<user name="b" password="2" authorities="ROLE_USER,ROLE_ADMIN" />
<user name="c" password="3" authorities="ROLE_GUEST" />
</user-service>
</authentication-provider>
</authentication-manager>