X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=server%2Fmodules%2Forg.argeo.jackrabbit.webapp%2FWEB-INF%2Fsecurity.xml;fp=server%2Fmodules%2Forg.argeo.jackrabbit.webapp%2FWEB-INF%2Fsecurity.xml;h=caba1aa9f72a61392c3f11f4a05f642f05bb4ace;hb=10c220cf49f5b146bac50ed7fe2578135cd466f1;hp=2e08bfdb067368e932dbedef1ae21d8b79c9fa67;hpb=955f75aa71d14ca569c0207d7c176c2780a6880d;p=lgpl%2Fargeo-commons.git

diff --git a/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml b/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml
index 2e08bfdb0..caba1aa9f 100644
--- a/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml
+++ b/server/modules/org.argeo.jackrabbit.webapp/WEB-INF/security.xml
@@ -7,8 +7,26 @@
        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">
 
 	<security:http>
-		<security:http-basic />
+		<security:intercept-url pattern="/remoting/*"
+			access="ROLE_USER,ROLE_ADMIN,ROLE_ANONYMOUS" />
+		<security:intercept-url pattern="/*/node/*/**"
+			access="ROLE_USER,ROLE_ADMIN" />
 		<security:intercept-url pattern="/**"
 			access="ROLE_USER,ROLE_ADMIN,ROLE_ANONYMOUS" />
+		<security:http-basic />
+		<security:anonymous />
 	</security:http>
+
+	<!-- LDAP -->
+	<security:ldap-authentication-provider
+		user-dn-pattern="uid={0},ou=People" group-search-base="ou=Roles"
+		group-search-filter="(member={0})" user-details-class="inetOrgPerson" />
+	<!-- <security:password-compare> -->
+	<!-- <security:password-encoder hash="{ssha}" > -->
+	<!-- <security:salt-source system-wide="test"/> -->
+	<!-- </security:password-encoder> -->
+	<!-- </security:password-compare> -->
+	<!-- </security:ldap-authentication-provider> -->
+	<security:ldap-server url="ldap://localhost:10389/dc=demo,dc=argeo,dc=org" />
+
 </beans>
\ No newline at end of file