<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>
			/WEB-INF/applicationContext-acegi-security.xml
		</param-value>
	</context-param>


       <filter>
        <filter-name>Acegi Filter Chain Proxy</filter-name>
        <filter- class >org.acegisecurity.util.FilterToBeanProxy</filter- class >
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>org.acegisecurity.util.FilterChainProxy</param-value>
        </init-param>
   </filter>

    <filter-mapping>
      <filter-name>Acegi Filter Chain Proxy</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>


    <!--
      - Loads the root application context of  this  web app at startup.
      - The application context is then available via
      - WebApplicationContextUtils.getWebApplicationContext(servletContext).
    -->
    <listener>
        <listener- class >org.springframework.web.context.ContextLoaderListener</listener- class >
    </listener>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans  PUBLIC  "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">



<beans>


    <bean id="filterChainProxy"  class ="org.acegisecurity.util.FilterChainProxy">
        <property name="filterInvocationDefinitionSource">
            <value>
                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /**=authenticationProcessingFilter,exceptionTranslationFilter,httpSessionContextIntegrationFilter,securityContextHolderAwareRequestFilter

            </value>
        </property>
    </bean>



    <bean id="authenticationProcessingFilter"  class ="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter">
        <property name="authenticationManager"><ref bean="authenticationManager"/></property>
        <property name="authenticationFailureUrl"><value>/acegilogin.jsp?login_error= 1 </value></property>
        <property name="defaultTargetUrl"><value>/</value></property>
        <property name="filterProcessesUrl"><value>/j_acegi_security_check</value></property>
    </bean>

    <bean id="authenticationManager"  class ="org.acegisecurity.providers.ProviderManager">
        <property name="providers">
            <list>
                <ref local="daoAuthenticationProvider"/>
                <!--<ref local="anonymousAuthenticationProvider"/>-->
                <!--<ref local="rememberMeAuthenticationProvider"/>-->
            </list>
        </property>
    </bean>

    <bean id="daoAuthenticationProvider"  class ="org.acegisecurity.providers.dao.DaoAuthenticationProvider">
        <property name="userDetailsService"><ref bean="inMemoryDaoImpl"/></property>
        <!--<property name="saltSource"><ref bean="saltSource"/></property>-->
        <!--<property name="passwordEncoder"><ref bean="passwordEncoder"/></property>-->
    </bean>

    <!--
    <bean id="daoAuthenticationProvider"  class ="org.acegisecurity.providers.dao.DaoAuthenticationProvider">
            <property name="userDetailsService" ref="userDetailsService"/>
            <property name="userCache">
                <bean  class ="org.acegisecurity.providers.dao.cache.EhCacheBasedUserCache">
                    <property name="cache">
                        <bean  class ="org.springframework.cache.ehcache.EhCacheFactoryBean">
                            <property name="cacheManager">
                                <bean  class ="org.springframework.cache.ehcache.EhCacheManagerFactoryBean"/>
                            </property>
                            <property name="cacheName" value="userCache"/>
                        </bean>
                    </property>
                </bean>
            </property>
        </bean>
    -->
    <bean id="inMemoryDaoImpl"  class ="org.acegisecurity.userdetails.memory.InMemoryDaoImpl">
        <property name="userMap">
            <value>
                marissa=koala,ROLE_TELLER,ROLE_SUPERVISOR
                dianne=emu,ROLE_TELLER
                scott=wombat,ROLE_TELLER
                peter=opal,disabled,ROLE_TELLER
            </value>
        </property>
    </bean>



    <!--
        ExceptionTranslationFilter, to  catch  any Acegi Security exceptions so that either a HTTP error response can be returned
        or an appropriate AuthenticationEntryPoint can be launched( if  the principal has not been authenticated and therefore we need to go commence step three).
    -->

    <bean id="exceptionTranslationFilter"  class ="org.acegisecurity.ui.ExceptionTranslationFilter">
        <property name="authenticationEntryPoint"><ref local="authenticationProcessingFilterEntryPoint"/></property>
        <property name="accessDeniedHandler">
            <bean  class ="org.acegisecurity.ui.AccessDeniedHandlerImpl">
                <property name="errorPage" value="/accessDenied.jsp"/>
            </bean>
        </property>
    </bean>

    <bean id="authenticationProcessingFilterEntryPoint"  class ="org.acegisecurity.ui.webapp.AuthenticationProcessingFilterEntryPoint">
        <property name="loginFormUrl"><value>/acegilogin.jsp</value></property>
        <property name="forceHttps"><value>false</value></property>
    </bean>

    <!--HttpSessionContextIntegrationFilter, to store the SecurityContext in the HttpSession between web requests.-->
    <bean id="httpSessionContextIntegrationFilter"  class ="org.acegisecurity.context.HttpSessionContextIntegrationFilter"/>

    <!--The SecurityContextHolderAwareRequestFilter,  if  you are using it to install an Acegi Security aware HttpServletRequestWrapper into your servlet container-->
    <bean id="securityContextHolderAwareRequestFilter"  class ="org.acegisecurity.wrapper.SecurityContextHolderAwareRequestFilter"/>


</beans>

    <bean id="filterInvocationInterceptor"  class ="org.acegisecurity.intercept.web.FilterSecurityInterceptor">
        <property name="authenticationManager" ref="authenticationManager"/>
        <property name="accessDecisionManager"><ref bean="accessDecisionManager"/></property>

        <property name="objectDefinitionSource">
            <value>
                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /secure/extreme/**=ROLE_SUPERVISOR
                /secure/**=ROLE_SUPERVISOR,ROLE_TELLER
            </value>
        </property>
    </bean>
    <bean id="accessDecisionManager"  class ="org.acegisecurity.vote.AffirmativeBased">
        <property name="allowIfAllAbstainDecisions" value="false"/>
        <property name="decisionVoters">
            <list>
                <bean  class ="org.acegisecurity.vote.RoleVoter"/>
                <bean  class ="org.acegisecurity.vote.AuthenticatedVoter"/>
            </list>
        </property>
    </bean>

 default -autowire="byName"