Spring Security 基于数据库的权限管理配置
目前在做一个原型系统，其中涉及到权限管理部分，研究了一下
Spring Security，由于网上资料都是在配置文件里面定义url权限的，基本上没有存在数据库中的。在这个过程中我在网上找了很多资料，但是没有一个是完全能够解决问题的，acegi的例子springside倒是有一个。 而下面这段是一位网上朋友提供的，还不错，解析的清楚，大家可以参考
applicationContext-security.xml文件如下：
applicationContext-security.xml文件如下：
Java代码
- "1.0"encoding="UTF-8"?>
-
- xmlns:p="http://www.springframework.org/schema/p"
- xmlns:security="http://www.springframework.org/schema/security"
- xsi:schemaLocation="http://www.springframework.org/schema/beanshttp://www.springframework.org/schema/beans/spring-beans.xsd
- http://www.springframework.org/schema/securityhttp://www.springframework.org/schema/security/spring-security-2.0.2.xsd">
-
- class="org.springframework.security.util.FilterChainProxy">
-
- CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
- PATTERN_TYPE_APACHE_ANT
- /**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,securityContextHolderAwareRequestFilter,rememberMeProcessingFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterSecurityInterceptor
- ]]>
-
- class="org.springframework.security.context.HttpSessionContextIntegrationFilter"/>
-
- class="org.springframework.security.ui.logout.LogoutFilter">
-
-
-
-
- class="org.springframework.security.ui.webapp.AuthenticationProcessingFilter"
- p:authenticationManager-ref="authenticationManager"
- p:authenticationFailureUrl="/login.action?login_error=1"
- p:defaultTargetUrl="/user.action"
- p:filterProcessesUrl="/j_spring_security_check"
- p:rememberMeServices-ref="rememberMeServices"/>
-
- class="org.springframework.security.providers.ProviderManager"
- p:sessionController-ref="concurrentSessionController">
-
-
- class="org.springframework.security.providers.anonymous.AnonymousAuthenticationProvider"
- p:key="springsecurity"/>
- class="org.springframework.security.providers.rememberme.RememberMeAuthenticationProvider"
- p:key="springsecurity"/>
-
- class="org.springframework.security.concurrent.ConcurrentSessionControllerImpl"
- p:maximumSessions="1"
- p:exceptionIfMaximumExceeded="true"
- p:sessionRegistry-ref="sessionRegistry"
- p:messageSource-ref="messageSource"/>
-
- class="org.springframework.security.concurrent.SessionRegistryImpl"/>
-
- class="org.springframework.context.support.ReloadableResourceBundleMessageSource"
- p:basename="/WEB-INF/classes/messages_zh_CN"/>
-
- class="org.springframework.security.wrapper.SecurityContextHolderAwareRequestFilter"/>
-
- class="org.springframework.security.ui.rememberme.RememberMeProcessingFilter"
- p:authenticationManager-ref="authenticationManager"
- p:rememberMeServices-ref="rememberMeServices"/>
-
- class="org.springframework.security.providers.anonymous.AnonymousProcessingFilter"
- p:key="springsecurity"
- p:userAttribute="anonymousUser,ROLE_ANONYMOUS"/>
-
- class="org.springframework.security.ui.ExceptionTranslationFilter"
- p:accessDeniedHandler-ref="accessDeniedHandler"
- p:authenticationEntryPoint-ref="authenticationEntryPoint"/>
-
- class="org.springframework.security.ui.AccessDeniedHandlerImpl"
- p:errorPage="/accessDenied.jsp"/>
-
- class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint"
- p:loginFormUrl="/login.action"
- p:forceHttps="false"/>
-
- class="org.springframework.security.intercept.web.FilterSecurityInterceptor"
- p:authenticationManager-ref="authenticationManager"
- p:accessDecisionManager-ref="accessDecisionManager"
- p:objectDefinitionSource-ref="objectDefinitionSource">
-
- class="com.shopin.modules.security.intercept.web.DataBaseFilterInvocationDefinitionSource"
- p:convertUrlToLowercaseBeforeComprison="true"
- p:useAntPath="true"
- p:cacheManager-ref="securityCacheManager"/>
-
- class="org.springframework.security.vote.AffirmativeBased"
- p:allowIfAllAbstainDecisions="false">
-
-
-
-
- class="org.springframework.security.ui.rememberme.TokenBasedRememberMeServices"
- p:key="springsecurity"
- p:userDetailsService-ref="userDetailsService"/>
-
- class="org.springframework.security.providers.dao.DaoAuthenticationProvider"
- p:userCache-ref="userCache"
- p:passwordEncoder-ref="passwordEncoder"
- p:userDetailsService-ref="userDetailsService"/>
-
- class="org.springframework.security.providers.encoding.Md5PasswordEncoder"/>
-
- class="com.shopin.modules.security.resourcedetails.EhCacheResourceCache">
-
-
- p:cacheManager-ref="cacheManager"
- p:cacheName="resourceCache"/>
-
- class="org.springframework.security.providers.dao.cache.EhCacheBasedUserCache">
-
-
- p:cacheManager-ref="cacheManager"
- p:cacheName="userCache"/>
-
- class="org.springframework.cache.ehcache.EhCacheManagerFactoryBean"
- p:configLocation="classpath:ehcache-hibernate.xml">
-
-
- class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean"
- p:transactionManager-ref="transactionManager"
- p:proxyTargetClass="true">
-
-
- p:sessionFactory-ref="sessionFactory"
- p:resourcCache-ref="resourceCache"/>
-
-
-
-
- class="org.springframework.security.event.authentication.LoggerListener"/>