Jackrabbit security improved

[lgpl/argeo-commons.git] / server / modules / org.argeo.jackrabbit.webapp / WEB-INF / security.xml

diff --git a/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml b/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml
index 2e08bfdb067368e932dbedef1ae21d8b79c9fa67..caba1aa9f72a61392c3f11f4a05f642f05bb4ace 100644 (file)
--- a/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml
+++ b/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml
@@ -7,8 +7,26 @@
        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">
 
        <security:http>
-               <security:http-basic />
+               <security:intercept-url pattern="/remoting/*"
+                       access="ROLE_USER,ROLE_ADMIN,ROLE_ANONYMOUS" />
+               <security:intercept-url pattern="/*/node/*/**"
+                       access="ROLE_USER,ROLE_ADMIN" />
                <security:intercept-url pattern="/**"
                        access="ROLE_USER,ROLE_ADMIN,ROLE_ANONYMOUS" />
+               <security:http-basic />
+               <security:anonymous />
        </security:http>
+
+       <!-- LDAP -->
+       <security:ldap-authentication-provider
+               user-dn-pattern="uid={0},ou=People" group-search-base="ou=Roles"
+               group-search-filter="(member={0})" user-details-class="inetOrgPerson" />
+       <!-- <security:password-compare> -->
+       <!-- <security:password-encoder hash="{ssha}" > -->
+       <!-- <security:salt-source system-wide="test"/> -->
+       <!-- </security:password-encoder> -->
+       <!-- </security:password-compare> -->
+       <!-- </security:ldap-authentication-provider> -->
+       <security:ldap-server url="ldap://localhost:10389/dc=demo,dc=argeo,dc=org" />
+
 </beans>
\ No newline at end of file