Anonymous login with spring security 2.0
Jean-François Houzard <[email protected]> Wed, 15 Sep 2010 09:25:37 +0200
| Newsgroups | gmane.comp.java.springframework.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello, I have a webapp containing 4 features. Each feature is
protected by a specific role.
The roles are stored in a MySQL data base. (I use the users and
authorities schema as describes by the spring doc).
All of this work actually quiet well.
Here is my actual spring configuration for the security:
<security:http auto-config="true"
access-denied-page="/accessDenied.jsp">
<security:intercept-url pattern="/ChangeLanguage.action" filters="none"/>
<security:intercept-url pattern="/Login.action" filters="none"/>
<security:intercept-url pattern="/Start.action" access="ROLE_LIST,
ROLE_HERK, ROLE_CONF, ROLE_IMPORT" />
<security:intercept-url pattern="/List.action" access="ROLE_LIST" />
<security:intercept-url pattern="/Herkenning.action" access="ROLE_HERK" />
<security:intercept-url pattern="/Confrontatie.action" access="ROLE_CONF" />
<security:intercept-url pattern="/Importeren.action" access="ROLE_IMPORT" />
<security:intercept-url pattern="/list/**" access="ROLE_LIST" />
<security:intercept-url pattern="/herkenning/**" access="ROLE_HERK" />
<security:intercept-url pattern="/confrontatie/**" access="ROLE_CONF" />
<security:intercept-url pattern="/importeren/**" access="ROLE_IMPORT" />
<security:intercept-url pattern="/**/EditDetails.action" access="ROLE_EDIT" />
<security:intercept-url pattern="/**/Delete.action" access="ROLE_DELETE" />
<security:form-login login-page="/Login.action"
authentication-failure-url="/Login.action?login_error=true"
default-target-url="/Start.action" always-use-default-target="true"/>
</security:http>
<bean id="userDetailsService" class="com.steria.security.MyJdbcDaoImpl">
...
</bean>
<security:authentication-provider user-service-ref="userDetailsService">
<security:password-encoder hash="md5"/>
</security:authentication-provider>
Now I would like to add an anonymous acces to the website. In fact I
would like to specify in my database various ROLE for the anonymus
user.
For example, I would like to set in my data base the ROLE_LIST to the
anonymous user, so that he can acces the List.action page without any
login.
Can someone help me to do that? Thanks!
Regards,
Jean-François Houzard
------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev