Subversion Repositories SmartDukaan

# =======================
# Shiro INI configuration
# =======================

[main]
# Objects and their properties are defined here, 
# Such as the securityManager, Realms and anything
# else needed to build the SecurityManager
builtInCacheManager = org.apache.shiro.cache.MemoryConstrainedCacheManager
securityManager.cacheManager = $builtInCacheManager


inventoryAuthorizingRealm = in.shop2020.serving.auth.InventoryAuthorizingRealm
sha256Matcher = org.apache.shiro.authc.credential.HashedCredentialsMatcher
sha256Matcher.hashAlgorithmName=SHA-256
inventoryAuthorizingRealm.credentialsMatcher = $sha256Matcher
authc = in.shop2020.serving.auth.VerboseFilter
authc.loginUrl = /login.html
authc.successUrl = /
# 2 hours session timeout
securityManager.sessionManager.globalSessionTimeout = 7200000

[users]
# The 'users' section is for simple deployments
# when you only need a small number of statically-defined
# set of User accounts.

[roles]
# The 'roles' section is for simple deployments
# when you only need a small number of statically-defined
# roles.

[urls]
# The 'urls' section is used for url-based security
# in web applications.  We'll discuss this section in the
# Web documentation
/purchase-order/new = authc, perms["po:create"]
/purchase-order/*/edit = authc, perms["po:amend"]
/purchase-order/* = authc, perms["po:receive"]
/purchase/** = authc, perms["po:receive"]
/doa-in/** = authc, perms["po:receive"]
/doa-out/** = authc, perms["po:receive"]
/current-inventory/** = authc, perms["inventory:read"]
/ignored-item-mapping/** = authc, perms["inventory:ignoreditemmapping:read"]
/accounting-reports = authc, perms["accounting-reports:read"]
/sale-report = authc, perms["sale-report:read"]
/sale-return-report = authc, perms["sale-return-report:read"]
/purchase-report = authc, perms["purchase-report:read"]
/supplier-inventory = anon
/invoice/new = authc, perms["invoice:receive"]
/invoice = authc, perms["invoice:read"]
/supplier/new = authc, perms["supplier:create"]
/supplier/*/edit = authc, perms["supplier:edit"]
/supplier/* = authc, perms["supplier:read"]
/current-inventory = authc, perms["inventory:read"]
/inventory-age = authc, perms["inventory-age:read"]
/scan-record = anon
/inventory-reader/** = authc, perms["inventory-age:read"] 
/purchase-return = authc, perms["purchase-return:read"]
/movement-report/** = authc, perms["movement-report:read"]
/hotspot-indent = authc, perms["hotspot-indent:create"]
/transfer-lot = authc, perms["transfer-lot:view"]
/transfer-lot/new = authc, perms["transfer-lot:create"]
/transfer-lot-receive = authc, perms["po:receive"] 
/** = authc