source: branches/TaskRewrite/src/grails-app/conf/SecurityConfig.groovy @ 71

Last change on this file since 71 was 71, checked in by gav, 11 years ago

Start changing roles to AppAdmin? and AppUser?.
Add Options view, start code for user changeable passwords.
Repair home and admin bean error variables.

File size: 1.6 KB
Line 
1security {
2
3        // see DefaultSecurityConfig.groovy for all settable/overridable properties
4
5        active = true
6
7        loginUserDomainClass = "Person"
8    userName = 'loginName'
9    password = 'password'
10    enabled = 'isActive'
11
12        authorityDomainClass = "Authority"
13
14    //Required if we want to run "grails generate-manager"
15    //Which recreates the controller and views, so save the views!
16//     requestMapClass = 'Requestmap'
17
18    useRequestMapDomainClass = false
19    useControllerAnnotations = true
20
21    //Set true especially if used across the internet.
22    forceHttps = 'false'
23
24    //Pessimistic locking, deny access to all URLs that don't
25    //have an applicable URL-Role configuration.
26    //This forces us to set an annotation, static rule or
27    //extend BaseController and prevents accidentally leaving pages open.
28    controllerAnnotationsRejectIfNoRule = true
29   
30    //Static rules for controllers, actions and urls.
31    //Since we are using pessimistic locking we have to set some things
32    //here but most security should be set in the controllers.
33    controllerAnnotationStaticRules = [
34    '/': ['IS_AUTHENTICATED_FULLY'],
35    '/index.gsp': ['IS_AUTHENTICATED_FULLY'],
36    '/css/*': ['IS_AUTHENTICATED_ANONYMOUSLY'],
37    '/images/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
38    '/login*': ['IS_AUTHENTICATED_ANONYMOUSLY'],
39    '/login/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
40    '/logout*': ['IS_AUTHENTICATED_FULLY'],
41    '/logout/**': ['IS_AUTHENTICATED_FULLY']
42    ]
43
44    //We always want to go to the home page so that bookmarks are not used.
45    defaultTargetUrl = '/appCore/home'
46    alwaysUseDefaultTargetUrl = true
47
48}
Note: See TracBrowser for help on using the repository browser.