gistfile1.xml

<beans:beans xmlns="http://www.springframework.org/schema/security"
  xmlns:beans="http://www.springframework.org/schema/beans" xmlns:b="http://www.springframework.org/schema/beans"
	xmlns:util="http://www.springframework.org/schema/util" xmlns:jee="http://www.springframework.org/schema/jee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans
	http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
	http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-3.1.xsd
	http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-3.1.xsd
	http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">


	<global-method-security pre-post-annotations="enabled" />

	<http pattern="/web/login" security="none" />

	<http auto-config="true" use-expressions="true">
        <intercept-url pattern="/web/login" access="permitAll" />
        <intercept-url pattern="/j_spring_security_check" access="permitAll" />
        <intercept-url pattern="/web/j_spring_security_check" access="permitAll" />
		<custom-filter before="FIRST" ref="hdivFilter" />
		
		<intercept-url pattern="/web/commande/**" access="hasRole('Habilite')" />
		<intercept-url pattern="/web/dref/**" access="hasRole('Administrateur')" />
		<form-login 
			login-page="/web/login" 
			default-target-url="/web/accueil"
			always-use-default-target="true" 
			authentication-failure-url="/web/login?login_error=1" />
		<remember-me user-service-ref="userDetailsService"/>
		<access-denied-handler error-page="/web/errors/403"/>	
		<logout logout-success-url="/web/login" />
	</http>
	
	<!-- Déclaration de validator filter de hdiv en cas d'utilisation de Hdiv+spring security -->
	<b:bean id="hdivFilter" class="org.hdiv.filter.ValidatorFilter" />

	<!-- <jee:jndi-lookup id="idAppli" jndi-name="java:comp/env/ldap/gide/idappli" />
	<jee:jndi-lookup id="codeAppli" jndi-name="java:comp/env/ldap/gide/codeappli" />
	<jee:jndi-lookup id="gideURL" jndi-name="java:comp/env/ldap/gide/url" /> -->

	<!-- Provider de securite GIDE 
	<b:bean id="wsGideAuthenticationProvider"
		class="fr.icdc.dei.fwk.security.provider.WSGideUserDetailsAuthenticationProvider">
		<b:property name="idApplication" ref="idAppli" />
		<b:property name="codeApplication" ref="codeAppli" />
		<b:property name="gideUrl" ref="gideURL" />
	</b:bean>-->

	<!-- Activation du manager d'authentification -->
	
		<authentication-manager>
			<!-- <authentication-provider ref="wsGideAuthenticationProvider" /> -->
			
			<authentication-provider>
				<user-service id="userDetailsService">
					<user name="yguenoun" password="password" authorities="Habilite" />
					<user name="gdauvergne" password="password" authorities="Habilite, Administrateur" />
					<user name="hshams" password="password" authorities="Habilite, Administrateur" />
				</user-service>
			</authentication-provider>

		</authentication-manager>




</beans:beans>