[jboss-cvs] jbosssx/src/resources ...

[Anil Saldhana]

  User: asaldhana
  Date: 06/07/25 13:13:15

  Added:       src/resources  security-policies-service.xml
  Log:
  JBAS-3324: Default security policies file that the web/ejb (and other layers) can use to set their default policies
  
  Revision  Changes    Path
  1.1      date: 2006/07/25 17:13:15;  author: asaldhana;  state: Exp;jbosssx/src/resources/security-policies-service.xml
  
  Index: security-policies-service.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
  
  <server>
     <!-- The custom JAAS login configuration that installs 
         a Configuration capable of dynamically updating the
         config settings
     -->
     <mbean code="org.jboss.security.auth.login.DynamicLoginConfig"
        name="jboss.security:service=StandardLoginConfig">
        <attribute name="PolicyConfig" serialDataType="jbxb">
           <jbsx:policy
              xsi:schemaLocation="urn:jboss:security-config:5.0 resource:security-config_5_0.xsd"
              xmlns:jbsx="urn:jboss:security-config:5.0"
              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
              >
              <jbsx:application-policy name="jboss-web-policy">
                <jbsx:authentication>
                  <jbsx:login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required"/>
                </jbsx:authentication>
                <jbsx:authorization>
                 <jbsx:policy-module code="org.jboss.security.authorization.modules.DelegatingAuthorizationModule" flag="required"/>
                </jbsx:authorization>
              </jbsx:application-policy>
              <jbsx:application-policy name="jboss-ejb-policy">
                <jbsx:authentication>
                  <jbsx:login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required"/>
                </jbsx:authentication>
                <jbsx:authorization>
                 <jbsx:policy-module code="org.jboss.security.authorization.modules.DelegatingAuthorizationModule" flag="required"/>
                </jbsx:authorization>
              </jbsx:application-policy>
           </jbsx:policy>         
        </attribute>
        <depends optional-attribute-name="LoginConfigService">
           jboss.security:service=XMLLoginConfig
        </depends>
        <depends optional-attribute-name="SecurityManagerService">
           jboss.security:service=JaasSecurityManager
        </depends>
     </mbean>
  </server>