<?xml version="1.0" encoding="UTF-8"?>

<!--
  -
  -->

<b:beans xmlns="http://www.springframework.org/schema/security"
	xmlns:b="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans https://www.springframework.org/schema/beans/spring-beans-3.0.xsd
						http://www.springframework.org/schema/security https://www.springframework.org/schema/security/spring-security.xsd">

	<http pattern="/secured/**" use-expressions="false" use-authorization-manager="false">
		<intercept-url pattern="/secured/*user.html" access="ROLE_USER" />
		<intercept-url pattern="/secured/admin.html" access="ROLE_ADMIN" />
		<intercept-url pattern="/secured/user/**" access="ROLE_USER" />
		<intercept-url pattern="/secured/admin/*" access="ROLE_ADMIN" />
		<intercept-url pattern="/**" access="ROLE_NO_ACCESS" />
		<form-login />
	</http>

	<http pattern="/**" security="none" />

	<authentication-manager alias="authenticationManager">
		<authentication-provider>
			<user-service id="userService">
				<user name="notused" password="notused" authorities="ROLE_0,ROLE_1"/>
			</user-service>
		</authentication-provider>
	</authentication-manager>

</b:beans>
