1 | security { |
---|
2 | |
---|
3 | def authenticateService |
---|
4 | |
---|
5 | // See DefaultSecurityConfig.groovy for all settable/overridable properties |
---|
6 | |
---|
7 | active = true |
---|
8 | |
---|
9 | loginUserDomainClass = "Person" |
---|
10 | userName = 'loginName' |
---|
11 | password = 'password' |
---|
12 | enabled = 'isActive' |
---|
13 | |
---|
14 | authorityDomainClass = "Authority" |
---|
15 | |
---|
16 | // Required if we want to run "grails generate-manager" |
---|
17 | // Which recreates the controller and views, so save the views! |
---|
18 | // requestMapClass = 'Requestmap' |
---|
19 | |
---|
20 | // The whole application relies on controllerAnnotations and the static rules bellow. |
---|
21 | useRequestMapDomainClass = false |
---|
22 | useControllerAnnotations = true |
---|
23 | |
---|
24 | // Set true especially if used across the internet. |
---|
25 | forceHttps = 'false' |
---|
26 | |
---|
27 | // Pessimistic locking, deny access to all URLs that don't |
---|
28 | // have an applicable URL-Role configuration. |
---|
29 | // This forces us to set an annotation, static rule or |
---|
30 | // extend BaseController and prevents accidentally leaving pages open. |
---|
31 | controllerAnnotationsRejectIfNoRule = true |
---|
32 | |
---|
33 | // Static rules for controllers, actions and urls. |
---|
34 | // Since we are using pessimistic locking we have to set some things |
---|
35 | // here but most security should be set in the controllers. |
---|
36 | controllerAnnotationStaticRules = [ |
---|
37 | '/': ['IS_AUTHENTICATED_FULLY'], |
---|
38 | '/index.gsp': ['IS_AUTHENTICATED_FULLY'], |
---|
39 | '/css/*': ['IS_AUTHENTICATED_ANONYMOUSLY'], |
---|
40 | '/images/**': ['IS_AUTHENTICATED_ANONYMOUSLY'], |
---|
41 | '/js/**': ['IS_AUTHENTICATED_ANONYMOUSLY'], |
---|
42 | '/plugins/**': ['IS_AUTHENTICATED_FULLY'], |
---|
43 | '/classDiagram*': ['IS_AUTHENTICATED_FULLY'], |
---|
44 | '/classDiagram/**': ['IS_AUTHENTICATED_FULLY'], |
---|
45 | '/login*': ['IS_AUTHENTICATED_ANONYMOUSLY'], |
---|
46 | '/login/**': ['IS_AUTHENTICATED_ANONYMOUSLY'], |
---|
47 | '/logout*': ['IS_AUTHENTICATED_FULLY'], |
---|
48 | '/logout/**': ['IS_AUTHENTICATED_FULLY'], |
---|
49 | '/image*': ['IS_AUTHENTICATED_FULLY'], |
---|
50 | '/image/**': ['IS_AUTHENTICATED_FULLY'] |
---|
51 | ] |
---|
52 | |
---|
53 | // Always call the welcome action so that bookmarks are not used, a |
---|
54 | // welcome message can be populated and the sessionTimeout can be set. |
---|
55 | defaultTargetUrl = '/appCore/welcome' |
---|
56 | alwaysUseDefaultTargetUrl = true |
---|
57 | |
---|
58 | // User caching, turned this off so that password changes take effect. |
---|
59 | // It would appear that user is still in the session as logout/login |
---|
60 | // is still required for role changes to take effect. |
---|
61 | // If this option causes high database load try: |
---|
62 | // import org.acegisecurity.providers.dao.DaoAuthenticationProvider |
---|
63 | // import org.acegisecurity.context.SecurityContextHolder |
---|
64 | // DaoAuthenticationProvider daoAuthenticationProvider |
---|
65 | // def user = SecurityContextHolder.context.authentication.principal.username |
---|
66 | // daoAuthenticationProvider.userCache.removeUserFromCache(user) |
---|
67 | // in logout controller and perhaps on password change and role change. |
---|
68 | cacheUsers = false |
---|
69 | |
---|
70 | // // Listen for events and run the closure(s) that follow. |
---|
71 | // // Unfortunately the session is not available yet so many things can't be done here, use a defaultTargetUrl and controller. |
---|
72 | // useSecurityEventListener = true |
---|
73 | // |
---|
74 | // onAuthenticationSuccessEvent = { e, appCtx -> |
---|
75 | // def p = e.source.principal |
---|
76 | // def personInstance = Person.findByLoginName(p.username) |
---|
77 | // println p.username |
---|
78 | // println personInstance.loginName |
---|
79 | // println personInstance.firstName |
---|
80 | // } |
---|
81 | |
---|
82 | } |
---|