From 595131c00a229f6a4688b6b628b0f631dddb0b2f Mon Sep 17 00:00:00 2001
From: Sanjay Dalal <sanjay.dalal@berkeley.edu>
Date: Fri, 23 Apr 2010 17:31:33 +0000
Subject: [PATCH] CSPACE-1489 cleaned up spring security metadata...work in
 progress for 1489 test: service level tests pass, 403 from browser still
 present

M    JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
---
 .../WEB-INF/applicationContext-security.xml   | 27 +++++++++++++------
 1 file changed, 19 insertions(+), 8 deletions(-)

diff --git a/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml b/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
index 419edd1c8..4fa95d249 100644
--- a/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
+++ b/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
@@ -25,14 +25,16 @@
     </sec:global-method-security>
 
 
-    <bean id="springSecurityFilterChain" class="org.springframework.security.web.FilterChainProxy">
+    <bean id="springSecurityFilterChain"
+          class="org.springframework.security.web.FilterChainProxy">
         <sec:filter-chain-map path-type="ant">
             <sec:filter-chain pattern="/**"
                               filters="securityPersistenceFilter,basicAuthenticationFilter,logoutFilter,exTranslationFilter,filterInvocationInterceptor"/>
         </sec:filter-chain-map>
     </bean>
 
-    <bean id="securityPersistenceFilter" class="org.springframework.security.web.context.SecurityContextPersistenceFilter"/>
+    <bean id="securityPersistenceFilter"
+          class="org.springframework.security.web.context.SecurityContextPersistenceFilter"/>
 
     <bean id="basicAuthenticationFilter"
           class="org.springframework.security.web.authentication.www.BasicAuthenticationFilter">
@@ -45,7 +47,8 @@
         <property name="realmName" value="org.collectionspace.services"/>
     </bean>
 
-    <bean id="logoutFilter" class="org.springframework.security.web.authentication.logout.LogoutFilter">
+    <bean id="logoutFilter"
+          class="org.springframework.security.web.authentication.logout.LogoutFilter">
         <constructor-arg value="/"/>
         <constructor-arg>
             <list>
@@ -54,7 +57,8 @@
         </constructor-arg>
     </bean>
 
-    <bean id="exTranslationFilter" class="org.springframework.security.web.access.ExceptionTranslationFilter">
+    <bean id="exTranslationFilter"
+          class="org.springframework.security.web.access.ExceptionTranslationFilter">
         <property name="authenticationEntryPoint" ref="preAuthenticatedProcessingFilterEntryPoint"/>
     </bean>
 
@@ -87,10 +91,12 @@
         </property>
     </bean>
 
-    <bean id="userDetailsService" class="org.collectionspace.authentication.spring.CSpaceUserDetailsService">
+    <bean id="userDetailsService"
+          class="org.collectionspace.authentication.spring.CSpaceUserDetailsService">
     </bean>
 
-    <bean id="filterInvocationInterceptor" class="org.springframework.security.web.access.intercept.FilterSecurityInterceptor">
+    <bean id="filterInvocationInterceptor"
+          class="org.springframework.security.web.access.intercept.FilterSecurityInterceptor">
         <property name="authenticationManager" ref="authenticationManager"/>
         <property name="accessDecisionManager" ref="httpRequestAccessDecisionManager"/>
         <!--property name="securityMetadataSource" ref="cspaceMetadataSource"/-->
@@ -101,16 +107,21 @@
         </property>
     </bean>
 
-    <bean id="httpRequestAccessDecisionManager" class="org.springframework.security.access.vote.AffirmativeBased">
+    <bean id="httpRequestAccessDecisionManager"
+          class="org.springframework.security.access.vote.AffirmativeBased">
         <property name="allowIfAllAbstainDecisions" value="false"/>
         <property name="decisionVoters">
             <list>
                 <ref bean="roleVoter"/>
+                <ref bean="authenticatedVoter"/>
             </list>
         </property>
     </bean>
 
-    <bean id="roleVoter" class="org.springframework.security.access.vote.AuthenticatedVoter"/>
+    <bean id="authenticatedVoter"
+          class="org.springframework.security.access.vote.AuthenticatedVoter"/>
+    <bean id="roleVoter"
+          class="org.springframework.security.access.vote.RoleVoter"/>
     <!--bean id="cspaceMetadataSource" class="org.collectionspace.services.authorization.spring.CSpaceSecurityMetadataSource">
         <property name="urlProperties">
             <util:properties location="classpath:urls.properties" />
-- 
2.47.3