1 changed files with 100 additions and 0 deletions
@ -0,0 +1,100 @@
@@ -0,0 +1,100 @@
|
||||
|
||||
namespace beans = "http://www.springframework.org/schema/beans" |
||||
namespace a = "http://relaxng.org/ns/compatibility/annotations/1.0" |
||||
datatypes xsd = "http://www.w3.org/2001/XMLSchema-datatypes" |
||||
|
||||
autoconfig = |
||||
## Provides automatic security configration for a application |
||||
element autoconfig {autoconfig.attlist, empty} |
||||
autoconfig.attlist = empty |
||||
|
||||
ldap = |
||||
## Sets up an ldap authentication provider, optionally with an embedded ldap server |
||||
element ldap {ldap.attlist, empty} |
||||
ldap.attlist &= |
||||
## Specifies the ldap server Url. If omitted, an embedded server will be created |
||||
attribute url { xsd:string }? |
||||
ldap.attlist &= |
||||
## Explicitly specify an ldif file resource to load |
||||
[ a:defaultValue = "classpath:*.ldif" ] attribute ldif { xsd:string }? |
||||
|
||||
intercept-methods = |
||||
## Can be used inside a bean definition to add a security interceptor to the bean and set up access |
||||
## configuration attributes for the bean's methods |
||||
element intercept-methods {intercept-methods.attlist, protect+} |
||||
|
||||
intercept-methods.attlist = empty |
||||
|
||||
protect = |
||||
## Defines a protected method and the access control configuration attributes that apply to it |
||||
element protect {protect.attlist, empty} |
||||
|
||||
protect.attlist &= |
||||
## A method name |
||||
attribute method {xsd:string} |
||||
protect.attlist &= |
||||
## Access configuration attributes list that applies to the method, e.g. "ROLE_A,ROLE_B" |
||||
attribute access {xsd:string} |
||||
|
||||
|
||||
http = |
||||
## Container element for HTTP security configuration |
||||
element http {http.attlist, intercept-url+, form-login?, logout? } |
||||
http.attlist &= |
||||
## Controls the eagerness with which an HTTP session is created. |
||||
[ a:defaultValue = "ifRequired" ] attribute createSession {"ifRequired" | "always" | "never" }? |
||||
http.attlist &= |
||||
## Defines the type of path used to define URLs in child elements. |
||||
[ a:defaultValue = "ant" ] attribute pathType {"regex" | "ant"}? |
||||
http.attlist &= |
||||
## Whether test URLs should be converted to lower case prior to comparing with defined path patterns. |
||||
[ a:defaultValue = "true" ] attribute lowerCaseComparisons {"true" | "true"}? |
||||
|
||||
intercept-url = |
||||
element intercept-url {intercept-url.attlist, empty} |
||||
intercept-url.attlist &= |
||||
attribute path {xsd:string} |
||||
intercept-url.attlist &= |
||||
attribute access {xsd:string}? |
||||
intercept-url.attlist &= |
||||
attribute filters {xsd:string}? |
||||
|
||||
logout = |
||||
element logout {logout.attlist, empty} |
||||
logout.attlist &= |
||||
[ a:defaultValue = "/j_spring_security_logout" ] attribute logoutUrl {xsd:string}? |
||||
logout.attlist &= |
||||
[ a:defaultValue = "/" ] attribute logoutSuccessUrl {xsd:string}? |
||||
logout.attlist &= |
||||
[ a:defaultValue = "true" ] attribute invalidateSession {"true" | "false"}? |
||||
|
||||
form-login = |
||||
## Sets up a form login configuration |
||||
element form-login {form-login.attlist, empty} |
||||
form-login.attlist &= |
||||
## The URL that the form is submitted to |
||||
[ a:defaultValue = "/j_spring_security_check" ] attribute loginUrl {xsd:string}? |
||||
|
||||
authentication-provider = |
||||
element authentication-provider {authentication-provider.attlist, (user-service | jdbc-user-service)} |
||||
authentication-provider.attlist &= empty |
||||
|
||||
user-service = |
||||
element user-service {user-service.attlist, (user* | jdbc-user-service)} |
||||
user-service.attlist &= |
||||
attribute properties {xsd:string}* |
||||
|
||||
|
||||
user = |
||||
element user {user.attlist, empty} |
||||
user.attlist &= |
||||
attribute name {xsd:string} |
||||
user.attlist &= |
||||
attribute password {xsd:string} |
||||
user.attlist &= |
||||
attribute authorities {xsd:string} |
||||
|
||||
jdbc-user-service = |
||||
element jdbc-user-service {jdbc-users.attlist, empty} |
||||
jdbc-users.attlist &= empty |
||||
|
||||
Loading…
Reference in new issue