D-Net

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"

	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"

	xmlns:context="http://www.springframework.org/schema/context"

	xmlns:security="http://www.springframework.org/schema/security"

	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd

			http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd

            http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">

<!-- 	<security:debug /> -->

	<security:http create-session="stateless">

		<security:http-basic />

		<security:intercept-url

			pattern="/mvc/inspector/index.do/**/Security**/**/show" access="ROLE_USER" />

		<security:intercept-url pattern="/mvc/inspector/index.do/**/User**/**/show"

			access="ROLE_USER" />

		<security:intercept-url

			pattern="/mvc/inspector/index.do/**/Security**/**/list" access="ROLE_USER" />

		<security:intercept-url pattern="/mvc/inspector/index.do/**/User**/**/list"

			access="ROLE_USER" />

		<security:intercept-url pattern="/mvc/inspector/index.do/**/show"

			access="ROLE_ANONYMOUS, ROLE_USER" />

		<security:intercept-url pattern="/mvc/inspector/index.do/**/list"

			access="ROLE_ANONYMOUS, ROLE_USER" />

		<security:intercept-url pattern="/mvc/inspector/msroProcessImage.do/**"

			access="ROLE_ANONYMOUS, ROLE_USER" />

		<security:intercept-url pattern="/mvc/inspector/backup.do/**"

			access="ROLE_ANONYMOUS, ROLE_USER" />

		<security:intercept-url pattern="/mvc/inspector/static.do/**"

			access="ROLE_ANONYMOUS, ROLE_USER" />

		<security:intercept-url pattern="/mvc/oai/**"

			access="ROLE_ANONYMOUS, ROLE_USER" />

		<security:intercept-url pattern="/mvc/api/**" access="ROLE_ANONYMOUS" />

		<security:intercept-url pattern="/mvc/inspector/**"

			access="ROLE_USER" />

		<security:intercept-url pattern="/mvc/ui/**"

			access="ROLE_USER" />

		<security:intercept-url pattern="/monitoring/**"

			access="ROLE_MONITOR" />

		<security:anonymous username="guest"

			granted-authority="ROLE_ANONYMOUS" />

	</security:http>

	<security:authentication-manager>

		<security:authentication-provider>

			<security:password-encoder hash="md5" />

			<security:user-service>

				<security:user name="admin" password="${inspector.admin.password}"

					authorities="ROLE_USER" />

				<security:user name="monitor" password="${inspector.monitor.password}"

				    authorities="ROLE_MONITOR" />

			</security:user-service>

		</security:authentication-provider>

	</security:authentication-manager>

</beans>