mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-07 17:49:17 +00:00
Fixed line endings: Use "-x --ignore-eol-style" during merges to avoid.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@13542 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Derek Hulley
@@ -1,447 +1,447 @@
|
|||||||
<?xml version='1.0' encoding='UTF-8'?>
|
<?xml version='1.0' encoding='UTF-8'?>
|
||||||
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
||||||
|
|
||||||
<!-- =================================================================== -->
|
<!-- =================================================================== -->
|
||||||
<!-- This file contains the bean definitions that support authentication -->
|
<!-- This file contains the bean definitions that support authentication -->
|
||||||
<!-- =================================================================== -->
|
<!-- =================================================================== -->
|
||||||
|
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- Acegi is used for authentication and protecting method calls on public -->
|
<!-- Acegi is used for authentication and protecting method calls on public -->
|
||||||
<!-- services. To do this requires our authentication mechanism to work -->
|
<!-- services. To do this requires our authentication mechanism to work -->
|
||||||
<!-- within the acegi framework. -->
|
<!-- within the acegi framework. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- It is important to decide if user names are case sensitive or not. -->
|
<!-- It is important to decide if user names are case sensitive or not. -->
|
||||||
<!-- This is configured in repository.properties. -->
|
<!-- This is configured in repository.properties. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- TODO: -->
|
<!-- TODO: -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- The transactional wrappers should be removed from the beans in this -->
|
<!-- The transactional wrappers should be removed from the beans in this -->
|
||||||
<!-- file. This should be done in the public services definitions. -->
|
<!-- file. This should be done in the public services definitions. -->
|
||||||
<!-- This requires some tests to be fixed up. -->
|
<!-- This requires some tests to be fixed up. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
|
|
||||||
|
|
||||||
<beans>
|
<beans>
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- The Acegi authentication manager. -->
|
<!-- The Acegi authentication manager. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- Provders are asked to authenticate in order. -->
|
<!-- Provders are asked to authenticate in order. -->
|
||||||
<!-- First, is a provider that checks if an acegi authentication object -->
|
<!-- First, is a provider that checks if an acegi authentication object -->
|
||||||
<!-- is already bound to the executing thread. If it is, and it is set -->
|
<!-- is already bound to the executing thread. If it is, and it is set -->
|
||||||
<!-- as authenticated then no further authentication is required. If -->
|
<!-- as authenticated then no further authentication is required. If -->
|
||||||
<!-- this is absent, Acegi validates the password for every method -->
|
<!-- this is absent, Acegi validates the password for every method -->
|
||||||
<!-- invocation, which is too CPU expensive. If we set an -->
|
<!-- invocation, which is too CPU expensive. If we set an -->
|
||||||
<!-- authentication based on a ticket etc .... or we want to set the -->
|
<!-- authentication based on a ticket etc .... or we want to set the -->
|
||||||
<!-- the system user as the current user ... we do not have the -->
|
<!-- the system user as the current user ... we do not have the -->
|
||||||
<!-- password. So if we have set an authentication and set it as -->
|
<!-- password. So if we have set an authentication and set it as -->
|
||||||
<!-- authenticated that is sufficient to validate the user. -->
|
<!-- authenticated that is sufficient to validate the user. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- If the authentication bound to the current thread is not set as -->
|
<!-- If the authentication bound to the current thread is not set as -->
|
||||||
<!-- authenticated the standard Acegi DAO Authentication provider -->
|
<!-- authenticated the standard Acegi DAO Authentication provider -->
|
||||||
<!-- is used to authenticate. -->
|
<!-- is used to authenticate. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
|
|
||||||
<bean id="authenticationManager" class="net.sf.acegisecurity.providers.ProviderManager">
|
<bean id="authenticationManager" class="net.sf.acegisecurity.providers.ProviderManager">
|
||||||
<property name="providers">
|
<property name="providers">
|
||||||
<list>
|
<list>
|
||||||
<ref bean="authenticatedAuthenticationPassthroughProvider" />
|
<ref bean="authenticatedAuthenticationPassthroughProvider" />
|
||||||
<ref bean="daoAuthenticationProvider" />
|
<ref bean="daoAuthenticationProvider" />
|
||||||
</list>
|
</list>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<!-- We provide a DAO to plug into the Acegi DaoAuthenticationProvider -->
|
<!-- We provide a DAO to plug into the Acegi DaoAuthenticationProvider -->
|
||||||
|
|
||||||
<bean id="daoAuthenticationProvider" class="net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider">
|
<bean id="daoAuthenticationProvider" class="net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider">
|
||||||
<property name="authenticationDao">
|
<property name="authenticationDao">
|
||||||
<ref bean="authenticationDao" />
|
<ref bean="authenticationDao" />
|
||||||
</property>
|
</property>
|
||||||
<property name="saltSource">
|
<property name="saltSource">
|
||||||
<ref bean="saltSource" />
|
<ref bean="saltSource" />
|
||||||
</property>
|
</property>
|
||||||
<property name="passwordEncoder">
|
<property name="passwordEncoder">
|
||||||
<ref bean="passwordEncoder" />
|
<ref bean="passwordEncoder" />
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<!-- An authentication Provider that just believes authentications -->
|
<!-- An authentication Provider that just believes authentications -->
|
||||||
<!-- bound to the local thread are valid if they are set as -->
|
<!-- bound to the local thread are valid if they are set as -->
|
||||||
<!-- authenticated. -->
|
<!-- authenticated. -->
|
||||||
|
|
||||||
<bean id="authenticatedAuthenticationPassthroughProvider" class="org.alfresco.repo.security.authentication.AuthenticatedAuthenticationPassthroughProvider" />
|
<bean id="authenticatedAuthenticationPassthroughProvider" class="org.alfresco.repo.security.authentication.AuthenticatedAuthenticationPassthroughProvider" />
|
||||||
|
|
||||||
<!-- The authroity DAO implements an interface extended from the Acegi -->
|
<!-- The authroity DAO implements an interface extended from the Acegi -->
|
||||||
<!-- DAO that supports CRUD. -->
|
<!-- DAO that supports CRUD. -->
|
||||||
|
|
||||||
<bean id="authenticationDao" class="org.alfresco.repo.security.authentication.RepositoryAuthenticationDao">
|
<bean id="authenticationDao" class="org.alfresco.repo.security.authentication.RepositoryAuthenticationDao">
|
||||||
<property name="nodeService">
|
<property name="nodeService">
|
||||||
<ref bean="nodeService" />
|
<ref bean="nodeService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="tenantService">
|
<property name="tenantService">
|
||||||
<ref bean="tenantService"/>
|
<ref bean="tenantService"/>
|
||||||
</property>
|
</property>
|
||||||
<property name="dictionaryService">
|
<property name="dictionaryService">
|
||||||
<ref bean="dictionaryService" />
|
<ref bean="dictionaryService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="namespaceService">
|
<property name="namespaceService">
|
||||||
<ref bean="namespaceService" />
|
<ref bean="namespaceService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="searchService">
|
<property name="searchService">
|
||||||
<ref bean="admSearchService" />
|
<ref bean="admSearchService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="retryingTransactionHelper">
|
<property name="retryingTransactionHelper">
|
||||||
<ref bean="retryingTransactionHelper"/>
|
<ref bean="retryingTransactionHelper"/>
|
||||||
</property>
|
</property>
|
||||||
<property name="userNamesAreCaseSensitive">
|
<property name="userNamesAreCaseSensitive">
|
||||||
<value>${user.name.caseSensitive}</value>
|
<value>${user.name.caseSensitive}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="passwordEncoder">
|
<property name="passwordEncoder">
|
||||||
<ref bean="passwordEncoder" />
|
<ref bean="passwordEncoder" />
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<!-- The DAO also acts as a salt provider. -->
|
<!-- The DAO also acts as a salt provider. -->
|
||||||
|
|
||||||
<alias alias="saltSource" name="authenticationDao"/>
|
<alias alias="saltSource" name="authenticationDao"/>
|
||||||
|
|
||||||
<!-- Passwords are encoded using MD4 -->
|
<!-- Passwords are encoded using MD4 -->
|
||||||
<!-- This is not ideal and only done to be compatible with NTLM -->
|
<!-- This is not ideal and only done to be compatible with NTLM -->
|
||||||
<!-- authentication against the default authentication mechanism. -->
|
<!-- authentication against the default authentication mechanism. -->
|
||||||
|
|
||||||
<bean id="passwordEncoder" class="org.alfresco.repo.security.authentication.MD4PasswordEncoderImpl"></bean>
|
<bean id="passwordEncoder" class="org.alfresco.repo.security.authentication.MD4PasswordEncoderImpl"></bean>
|
||||||
|
|
||||||
|
|
||||||
<!-- The Authentication Service implementation. -->
|
<!-- The Authentication Service implementation. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- This delegates its work to two services: -->
|
<!-- This delegates its work to two services: -->
|
||||||
<!-- an AuthenticationComponent and a MutableAuthenticationDAO. -->
|
<!-- an AuthenticationComponent and a MutableAuthenticationDAO. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- The permissions service is required so that permissions can be -->
|
<!-- The permissions service is required so that permissions can be -->
|
||||||
<!-- cleaned up when a user is deleted. -->
|
<!-- cleaned up when a user is deleted. -->
|
||||||
|
|
||||||
<bean id="authenticationService" class="org.alfresco.repo.security.authentication.AuthenticationServiceImpl">
|
<bean id="authenticationService" class="org.alfresco.repo.security.authentication.AuthenticationServiceImpl">
|
||||||
<property name="authenticationDao">
|
<property name="authenticationDao">
|
||||||
<ref bean="authenticationDao" />
|
<ref bean="authenticationDao" />
|
||||||
</property>
|
</property>
|
||||||
<property name="ticketComponent">
|
<property name="ticketComponent">
|
||||||
<ref bean="ticketComponent" />
|
<ref bean="ticketComponent" />
|
||||||
</property>
|
</property>
|
||||||
<property name="authenticationComponent">
|
<property name="authenticationComponent">
|
||||||
<ref bean="authenticationComponent" />
|
<ref bean="authenticationComponent" />
|
||||||
</property>
|
</property>
|
||||||
<property name="sysAdminCache">
|
<property name="sysAdminCache">
|
||||||
<ref bean="sysAdminCache"/>
|
<ref bean="sysAdminCache"/>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<!-- The authentication component. -->
|
<!-- The authentication component. -->
|
||||||
|
|
||||||
<bean id="AuthenticationComponent" class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean">
|
<bean id="AuthenticationComponent" class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean">
|
||||||
<property name="proxyInterfaces">
|
<property name="proxyInterfaces">
|
||||||
<value>org.alfresco.repo.security.authentication.AuthenticationComponent</value>
|
<value>org.alfresco.repo.security.authentication.AuthenticationComponent</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="transactionManager">
|
<property name="transactionManager">
|
||||||
<ref bean="transactionManager" />
|
<ref bean="transactionManager" />
|
||||||
</property>
|
</property>
|
||||||
<property name="target">
|
<property name="target">
|
||||||
<ref bean="authenticationComponent" />
|
<ref bean="authenticationComponent" />
|
||||||
</property>
|
</property>
|
||||||
<property name="transactionAttributes">
|
<property name="transactionAttributes">
|
||||||
<props>
|
<props>
|
||||||
<prop key="*">${server.transaction.mode.default}</prop>
|
<prop key="*">${server.transaction.mode.default}</prop>
|
||||||
</props>
|
</props>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<!-- Parent bean for beans derived from AbstractAuthenticationComponent -->
|
<!-- Parent bean for beans derived from AbstractAuthenticationComponent -->
|
||||||
<bean id="authenticationComponentBase" abstract="true">
|
<bean id="authenticationComponentBase" abstract="true">
|
||||||
<property name="tenantService">
|
<property name="tenantService">
|
||||||
<ref bean="tenantService"/>
|
<ref bean="tenantService"/>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<bean id="authenticationComponent"
|
<bean id="authenticationComponent"
|
||||||
class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl"
|
class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl"
|
||||||
parent="authenticationComponentBase">
|
parent="authenticationComponentBase">
|
||||||
<property name="authenticationDao">
|
<property name="authenticationDao">
|
||||||
<ref bean="authenticationDao" />
|
<ref bean="authenticationDao" />
|
||||||
</property>
|
</property>
|
||||||
<property name="authenticationManager">
|
<property name="authenticationManager">
|
||||||
<ref bean="authenticationManager" />
|
<ref bean="authenticationManager" />
|
||||||
</property>
|
</property>
|
||||||
<property name="allowGuestLogin">
|
<property name="allowGuestLogin">
|
||||||
<value>true</value>
|
<value>true</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="nodeService">
|
<property name="nodeService">
|
||||||
<ref bean="nodeService" />
|
<ref bean="nodeService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="personService">
|
<property name="personService">
|
||||||
<ref bean="personService" />
|
<ref bean="personService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="transactionService">
|
<property name="transactionService">
|
||||||
<ref bean="transactionService" />
|
<ref bean="transactionService" />
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
|
|
||||||
<!-- Simple Authentication component that rejects all authentication requests -->
|
<!-- Simple Authentication component that rejects all authentication requests -->
|
||||||
<!-- Use this defintion for Novell IChain integration. -->
|
<!-- Use this defintion for Novell IChain integration. -->
|
||||||
<!-- It should never go to the login screen so this is not required -->
|
<!-- It should never go to the login screen so this is not required -->
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
<bean id="authenticationComponent"
|
<bean id="authenticationComponent"
|
||||||
class="org.alfresco.repo.security.authentication.SimpleAcceptOrRejectAllAuthenticationComponentImpl"
|
class="org.alfresco.repo.security.authentication.SimpleAcceptOrRejectAllAuthenticationComponentImpl"
|
||||||
parent="authenticationComponentBase">
|
parent="authenticationComponentBase">
|
||||||
<property name="accept">
|
<property name="accept">
|
||||||
<value>true</value>
|
<value>true</value>
|
||||||
</property>
|
</property>
|
||||||
</property>
|
</property>
|
||||||
<property name="nodeService">
|
<property name="nodeService">
|
||||||
<ref bean="nodeService" />
|
<ref bean="nodeService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="personService">
|
<property name="personService">
|
||||||
<ref bean="personService" />
|
<ref bean="personService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="transactionService">
|
<property name="transactionService">
|
||||||
<ref bean="transactionService" />
|
<ref bean="transactionService" />
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
-->
|
-->
|
||||||
<bean id="personDaoImpl" class="org.alfresco.repo.security.person.PersonDaoImpl">
|
<bean id="personDaoImpl" class="org.alfresco.repo.security.person.PersonDaoImpl">
|
||||||
<property name="sessionFactory">
|
<property name="sessionFactory">
|
||||||
<ref bean="sessionFactory" />
|
<ref bean="sessionFactory" />
|
||||||
</property>
|
</property>
|
||||||
<property name="localeDAO">
|
<property name="localeDAO">
|
||||||
<ref bean="localeDAO" />
|
<ref bean="localeDAO" />
|
||||||
</property>
|
</property>
|
||||||
<property name="qnameDAO">
|
<property name="qnameDAO">
|
||||||
<ref bean="qnameDAO" />
|
<ref bean="qnameDAO" />
|
||||||
</property>
|
</property>
|
||||||
<property name="dictionaryService">
|
<property name="dictionaryService">
|
||||||
<ref bean="dictionaryService" />
|
<ref bean="dictionaryService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="tenantService">
|
<property name="tenantService">
|
||||||
<ref bean="tenantService"/>
|
<ref bean="tenantService"/>
|
||||||
</property>
|
</property>
|
||||||
<!-- The store in which people are persisted. -->
|
<!-- The store in which people are persisted. -->
|
||||||
<property name="storeUrl">
|
<property name="storeUrl">
|
||||||
<value>${spaces.store}</value>
|
<value>${spaces.store}</value>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
|
|
||||||
<!-- The person service. -->
|
<!-- The person service. -->
|
||||||
|
|
||||||
<bean id="personService" class="org.alfresco.repo.security.person.PersonServiceImpl" init-method="init">
|
<bean id="personService" class="org.alfresco.repo.security.person.PersonServiceImpl" init-method="init">
|
||||||
<property name="transactionService">
|
<property name="transactionService">
|
||||||
<ref bean="transactionService" />
|
<ref bean="transactionService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="nodeService">
|
<property name="nodeService">
|
||||||
<ref bean="nodeService" />
|
<ref bean="nodeService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="tenantService">
|
<property name="tenantService">
|
||||||
<ref bean="tenantService"/>
|
<ref bean="tenantService"/>
|
||||||
</property>
|
</property>
|
||||||
<property name="searchService">
|
<property name="searchService">
|
||||||
<ref bean="admSearchService" />
|
<ref bean="admSearchService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="permissionServiceSPI">
|
<property name="permissionServiceSPI">
|
||||||
<ref bean="permissionServiceImpl" />
|
<ref bean="permissionServiceImpl" />
|
||||||
</property>
|
</property>
|
||||||
<property name="authorityService">
|
<property name="authorityService">
|
||||||
<ref bean="authorityService" />
|
<ref bean="authorityService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="dictionaryService">
|
<property name="dictionaryService">
|
||||||
<ref bean="dictionaryService" />
|
<ref bean="dictionaryService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="namespacePrefixResolver">
|
<property name="namespacePrefixResolver">
|
||||||
<ref bean="namespaceService" />
|
<ref bean="namespaceService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="policyComponent">
|
<property name="policyComponent">
|
||||||
<ref bean="policyComponent"/>
|
<ref bean="policyComponent"/>
|
||||||
</property>
|
</property>
|
||||||
<property name="personCache">
|
<property name="personCache">
|
||||||
<ref bean="personCache" />
|
<ref bean="personCache" />
|
||||||
</property>
|
</property>
|
||||||
<property name="personDao">
|
<property name="personDao">
|
||||||
<ref bean="personDaoImpl" />
|
<ref bean="personDaoImpl" />
|
||||||
</property>
|
</property>
|
||||||
<!-- Configurable properties. -->
|
<!-- Configurable properties. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- TODO: -->
|
<!-- TODO: -->
|
||||||
<!-- Add support for creating real home spaces adn setting -->
|
<!-- Add support for creating real home spaces adn setting -->
|
||||||
<!-- permissions on the hame space and people created. -->
|
<!-- permissions on the hame space and people created. -->
|
||||||
<!-- -->
|
<!-- -->
|
||||||
<!-- The store in which people are persisted. -->
|
<!-- The store in which people are persisted. -->
|
||||||
<property name="storeUrl">
|
<property name="storeUrl">
|
||||||
<value>${spaces.store}</value>
|
<value>${spaces.store}</value>
|
||||||
</property>
|
</property>
|
||||||
<!-- Some authentication mechanisms may need to create people -->
|
<!-- Some authentication mechanisms may need to create people -->
|
||||||
<!-- in the repository on demand. This enables that feature. -->
|
<!-- in the repository on demand. This enables that feature. -->
|
||||||
<!-- If dsiabled an error will be generated for missing -->
|
<!-- If dsiabled an error will be generated for missing -->
|
||||||
<!-- people. If enabled then a person will be created and -->
|
<!-- people. If enabled then a person will be created and -->
|
||||||
<!-- persisted. -->
|
<!-- persisted. -->
|
||||||
<!-- Valid values are -->
|
<!-- Valid values are -->
|
||||||
<!-- ${server.transaction.allow-writes} -->
|
<!-- ${server.transaction.allow-writes} -->
|
||||||
<!-- false -->
|
<!-- false -->
|
||||||
<property name="createMissingPeople">
|
<property name="createMissingPeople">
|
||||||
<value>${server.transaction.allow-writes}</value>
|
<value>${server.transaction.allow-writes}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="userNamesAreCaseSensitive">
|
<property name="userNamesAreCaseSensitive">
|
||||||
<value>${user.name.caseSensitive}</value>
|
<value>${user.name.caseSensitive}</value>
|
||||||
</property>
|
</property>
|
||||||
<!-- New properties after 1.4.0 to deal with duplicate user ids when found -->
|
<!-- New properties after 1.4.0 to deal with duplicate user ids when found -->
|
||||||
<property name="processDuplicates">
|
<property name="processDuplicates">
|
||||||
<value>true</value>
|
<value>true</value>
|
||||||
</property>
|
</property>
|
||||||
<!-- one of: LEAVE, SPLIT, DELETE -->
|
<!-- one of: LEAVE, SPLIT, DELETE -->
|
||||||
<property name="duplicateMode">
|
<property name="duplicateMode">
|
||||||
<value>SPLIT</value>
|
<value>SPLIT</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="lastIsBest">
|
<property name="lastIsBest">
|
||||||
<value>true</value>
|
<value>true</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="includeAutoCreated">
|
<property name="includeAutoCreated">
|
||||||
<value>false</value>
|
<value>false</value>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<bean name="homeFolderManager" class="org.alfresco.repo.security.person.HomeFolderManager">
|
<bean name="homeFolderManager" class="org.alfresco.repo.security.person.HomeFolderManager">
|
||||||
<property name="nodeService">
|
<property name="nodeService">
|
||||||
<ref bean="nodeService" />
|
<ref bean="nodeService" />
|
||||||
</property>
|
</property>
|
||||||
<property name="policyComponent">
|
<property name="policyComponent">
|
||||||
<ref bean="policyComponent" />
|
<ref bean="policyComponent" />
|
||||||
</property>
|
</property>
|
||||||
<property name="defaultProvider">
|
<property name="defaultProvider">
|
||||||
<ref bean="userHomesHomeFolderProvider" />
|
<ref bean="userHomesHomeFolderProvider" />
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<bean name="baseHomeFolderProvider" class="org.alfresco.repo.security.person.AbstractHomeFolderProvider" abstract="true">
|
<bean name="baseHomeFolderProvider" class="org.alfresco.repo.security.person.AbstractHomeFolderProvider" abstract="true">
|
||||||
<property name="serviceRegistry">
|
<property name="serviceRegistry">
|
||||||
<ref bean="ServiceRegistry" />
|
<ref bean="ServiceRegistry" />
|
||||||
</property>
|
</property>
|
||||||
<property name="homeFolderManager">
|
<property name="homeFolderManager">
|
||||||
<ref bean="homeFolderManager" />
|
<ref bean="homeFolderManager" />
|
||||||
</property>
|
</property>
|
||||||
<property name="tenantService">
|
<property name="tenantService">
|
||||||
<ref bean="tenantService" />
|
<ref bean="tenantService" />
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<bean name="companyHomeFolderProvider" class="org.alfresco.repo.security.person.ExistingPathBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
<bean name="companyHomeFolderProvider" class="org.alfresco.repo.security.person.ExistingPathBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
||||||
<property name="path">
|
<property name="path">
|
||||||
<value>/${spaces.company_home.childname}</value>
|
<value>/${spaces.company_home.childname}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="storeUrl">
|
<property name="storeUrl">
|
||||||
<value>${spaces.store}</value>
|
<value>${spaces.store}</value>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<bean name="guestHomeFolderProvider" class="org.alfresco.repo.security.person.ExistingPathBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
<bean name="guestHomeFolderProvider" class="org.alfresco.repo.security.person.ExistingPathBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
||||||
<property name="path">
|
<property name="path">
|
||||||
<value>/${spaces.company_home.childname}/${spaces.guest_home.childname}</value>
|
<value>/${spaces.company_home.childname}/${spaces.guest_home.childname}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="storeUrl">
|
<property name="storeUrl">
|
||||||
<value>${spaces.store}</value>
|
<value>${spaces.store}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="userPermissions">
|
<property name="userPermissions">
|
||||||
<set>
|
<set>
|
||||||
<value>Consumer</value>
|
<value>Consumer</value>
|
||||||
</set>
|
</set>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<bean name="bootstrapHomeFolderProvider" class="org.alfresco.repo.security.person.BootstrapHomeFolderProvider" parent="baseHomeFolderProvider" />
|
<bean name="bootstrapHomeFolderProvider" class="org.alfresco.repo.security.person.BootstrapHomeFolderProvider" parent="baseHomeFolderProvider" />
|
||||||
|
|
||||||
<bean name="personalHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
<bean name="personalHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
||||||
<property name="path">
|
<property name="path">
|
||||||
<value>/${spaces.company_home.childname}</value>
|
<value>/${spaces.company_home.childname}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="storeUrl">
|
<property name="storeUrl">
|
||||||
<value>${spaces.store}</value>
|
<value>${spaces.store}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="inheritsPermissionsOnCreate">
|
<property name="inheritsPermissionsOnCreate">
|
||||||
<value>false</value>
|
<value>false</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="ownerPermissionsToSetOnCreate">
|
<property name="ownerPermissionsToSetOnCreate">
|
||||||
<set>
|
<set>
|
||||||
<value>All</value>
|
<value>All</value>
|
||||||
</set>
|
</set>
|
||||||
</property>
|
</property>
|
||||||
<property name="userPermissions">
|
<property name="userPermissions">
|
||||||
<set>
|
<set>
|
||||||
<value>All</value>
|
<value>All</value>
|
||||||
</set>
|
</set>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<bean name="userHomesHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
<bean name="userHomesHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider" parent="baseHomeFolderProvider">
|
||||||
<property name="path">
|
<property name="path">
|
||||||
<value>/${spaces.company_home.childname}/${spaces.user_homes.childname}</value>
|
<value>/${spaces.company_home.childname}/${spaces.user_homes.childname}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="storeUrl">
|
<property name="storeUrl">
|
||||||
<value>${spaces.store}</value>
|
<value>${spaces.store}</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="inheritsPermissionsOnCreate">
|
<property name="inheritsPermissionsOnCreate">
|
||||||
<value>false</value>
|
<value>false</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="ownerPermissionsToSetOnCreate">
|
<property name="ownerPermissionsToSetOnCreate">
|
||||||
<set>
|
<set>
|
||||||
<value>All</value>
|
<value>All</value>
|
||||||
</set>
|
</set>
|
||||||
</property>
|
</property>
|
||||||
<property name="userPermissions">
|
<property name="userPermissions">
|
||||||
<set>
|
<set>
|
||||||
<value>All</value>
|
<value>All</value>
|
||||||
</set>
|
</set>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
|
|
||||||
<!-- The ticket component. -->
|
<!-- The ticket component. -->
|
||||||
<!-- Used for reauthentication -->
|
<!-- Used for reauthentication -->
|
||||||
<bean id="ticketComponent" class="org.alfresco.repo.security.authentication.InMemoryTicketComponentImpl">
|
<bean id="ticketComponent" class="org.alfresco.repo.security.authentication.InMemoryTicketComponentImpl">
|
||||||
<property name="ticketsCache">
|
<property name="ticketsCache">
|
||||||
<ref bean="ticketsCache"/>
|
<ref bean="ticketsCache"/>
|
||||||
</property>
|
</property>
|
||||||
<!-- The period for which tickets are valid in XML duration format. -->
|
<!-- The period for which tickets are valid in XML duration format. -->
|
||||||
<!-- The default is P1H for one hour. -->
|
<!-- The default is P1H for one hour. -->
|
||||||
<property name="validDuration">
|
<property name="validDuration">
|
||||||
<value>PT1H</value>
|
<value>PT1H</value>
|
||||||
</property>
|
</property>
|
||||||
<!-- Do tickets expire or live for ever? -->
|
<!-- Do tickets expire or live for ever? -->
|
||||||
<property name="ticketsExpire">
|
<property name="ticketsExpire">
|
||||||
<value>false</value>
|
<value>false</value>
|
||||||
</property>
|
</property>
|
||||||
<!-- Are tickets only valid for a single use? -->
|
<!-- Are tickets only valid for a single use? -->
|
||||||
<property name="oneOff">
|
<property name="oneOff">
|
||||||
<value>false</value>
|
<value>false</value>
|
||||||
</property>
|
</property>
|
||||||
<!-- If ticketsEpire is true then how they should expire -->
|
<!-- If ticketsEpire is true then how they should expire -->
|
||||||
<!-- AFTER_INACTIVITY, AFTER_FIXED_TIME, DO_NOT_EXPIRE -->
|
<!-- AFTER_INACTIVITY, AFTER_FIXED_TIME, DO_NOT_EXPIRE -->
|
||||||
<!-- The default is AFTER_FIXED_TIME -->
|
<!-- The default is AFTER_FIXED_TIME -->
|
||||||
<property name="expiryMode">
|
<property name="expiryMode">
|
||||||
<value>AFTER_FIXED_TIME</value>
|
<value>AFTER_FIXED_TIME</value>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<!-- Used for generating user names -->
|
<!-- Used for generating user names -->
|
||||||
<bean id="userNameGenerator" class="org.alfresco.repo.security.authentication.BasicUserNameGenerator">
|
<bean id="userNameGenerator" class="org.alfresco.repo.security.authentication.BasicUserNameGenerator">
|
||||||
<property name="userNameLength">
|
<property name="userNameLength">
|
||||||
<value>6</value>
|
<value>6</value>
|
||||||
</property>
|
</property>
|
||||||
<property name="tenantService">
|
<property name="tenantService">
|
||||||
<ref bean="tenantService"/>
|
<ref bean="tenantService"/>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
|
|
||||||
<!-- Used for generating passwords -->
|
<!-- Used for generating passwords -->
|
||||||
<bean id="passwordGenerator" class="org.alfresco.repo.security.authentication.BasicPasswordGenerator">
|
<bean id="passwordGenerator" class="org.alfresco.repo.security.authentication.BasicPasswordGenerator">
|
||||||
<property name="passwordLength">
|
<property name="passwordLength">
|
||||||
<value>8</value>
|
<value>8</value>
|
||||||
</property>
|
</property>
|
||||||
</bean>
|
</bean>
|
||||||
</beans>
|
</beans>
|
||||||
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user