source: trunk/grails-app/conf/SecurityConfig.groovy @ 230

Last change on this file since 230 was 182, checked in by gav, 15 years ago

Add support for inventory item Pictures and Images.
Add new PersonService, refactor CreateDataService and TaskService to suite.

File size: 3.3 KB
Line 
1security {
2
3    def authenticateService
4
5        // See DefaultSecurityConfig.groovy for all settable/overridable properties
6
7        active = true
8
9        loginUserDomainClass = "Person"
10    userName = 'loginName'
11    password = 'password'
12    enabled = 'isActive'
13
14        authorityDomainClass = "Authority"
15
16    // Required if we want to run "grails generate-manager"
17    // Which recreates the controller and views, so save the views!
18//     requestMapClass = 'Requestmap'
19
20    // The whole application relies on controllerAnnotations and the static rules bellow.
21    useRequestMapDomainClass = false
22    useControllerAnnotations = true
23
24    // Set true especially if used across the internet.
25    forceHttps = 'false'
26
27    // Pessimistic locking, deny access to all URLs that don't
28    // have an applicable URL-Role configuration.
29    // This forces us to set an annotation, static rule or
30    // extend BaseController and prevents accidentally leaving pages open.
31    controllerAnnotationsRejectIfNoRule = true
32
33    // Static rules for controllers, actions and urls.
34    // Since we are using pessimistic locking we have to set some things
35    // here but most security should be set in the controllers.
36    controllerAnnotationStaticRules = [
37    '/': ['IS_AUTHENTICATED_FULLY'],
38    '/index.gsp': ['IS_AUTHENTICATED_FULLY'],
39    '/css/*': ['IS_AUTHENTICATED_ANONYMOUSLY'],
40    '/images/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
41    '/js/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
42    '/plugins/**': ['IS_AUTHENTICATED_FULLY'],
43    '/classDiagram*': ['IS_AUTHENTICATED_FULLY'],
44    '/classDiagram/**': ['IS_AUTHENTICATED_FULLY'],
45    '/login*': ['IS_AUTHENTICATED_ANONYMOUSLY'],
46    '/login/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
47    '/logout*': ['IS_AUTHENTICATED_FULLY'],
48    '/logout/**': ['IS_AUTHENTICATED_FULLY'],
49    '/image*': ['IS_AUTHENTICATED_FULLY'],
50    '/image/**': ['IS_AUTHENTICATED_FULLY']
51    ]
52
53    // Always call the welcome action so that bookmarks are not used, a
54    // welcome message can be populated and the sessionTimeout can be set.
55    defaultTargetUrl = '/appCore/welcome'
56    alwaysUseDefaultTargetUrl = true
57
58    // User caching, turned this off so that password changes take effect.
59    // It would appear that user is still in the session as logout/login
60    // is still required for role changes to take effect.
61    // If this option causes high database load try:
62    //  import org.acegisecurity.providers.dao.DaoAuthenticationProvider
63    //  import org.acegisecurity.context.SecurityContextHolder
64    //  DaoAuthenticationProvider daoAuthenticationProvider
65    //  def user = SecurityContextHolder.context.authentication.principal.username
66    //  daoAuthenticationProvider.userCache.removeUserFromCache(user)
67    //  in logout controller and perhaps on password change and role change.
68    cacheUsers = false
69
70//    // Listen for events and run the closure(s) that follow.
71//    // Unfortunately the session is not available yet so many things can't be done here, use a defaultTargetUrl and controller.
72//    useSecurityEventListener = true
73//
74//    onAuthenticationSuccessEvent = { e, appCtx ->
75//        def p = e.source.principal
76//        def personInstance = Person.findByLoginName(p.username)
77//        println p.username
78//        println personInstance.loginName
79//        println personInstance.firstName
80//    }
81
82}
Note: See TracBrowser for help on using the repository browser.