<beans:beans xmlns="http://www.springframework.org/schema/security"
		xmlns:beans="http://www.springframework.org/schema/beans"
		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		xsi:schemaLocation="http://www.springframework.org/schema/beans
		http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
		http://www.springframework.org/schema/security
		http://www.springframework.org/schema/security/spring-security-3.1.xsd">
	
	<http auto-config="true">
		<intercept-url pattern="/adminpanel/*" access="ROLE_ADMIN"/>
		<form-login login-page="/index.xhtml" authentication-failure-url="/fail.xhtml"/>
	</http>

	  <authentication-manager>
		<authentication-provider>
			<jdbc-user-service data-source-ref="dataSource"
				users-by-username-query="select username,password,enabled from users where username=?"
				authorities-by-username-query="select u.username,auth.authority from users u, authorities auth 
				where u.user_id=auth.user_id and u.username=?"/>
		</authentication-provider>
	</authentication-manager>
</beans:beans>

<h:form id="loginForm" prependId="false">
				<h:panelGroup>
					Логин: <h:inputText id="j_username" required="true"/>
				</h:panelGroup>
				<br/>
				<h:panelGroup>
					Пароль: <h:inputText id="j_password" required="true"/>
				</h:panelGroup>
				<br/><br/>
				<h:panelGroup>
					<h:commandButton type="submit" id="login" action="#{authenticationBean.doLogin()}" value="Войти"/>
				</h:panelGroup>
			</h:form> 

@ManagedBean
@RequestScoped
public class AuthenticationBean {
	public String doLogin() throws IOException,ServletException{
		ExternalContext context = FacesContext.getCurrentInstance().getExternalContext();
		RequestDispatcher dispatcher = ((ServletRequest)context.getRequest()).getRequestDispatcher("/j_spring_security_check");
		dispatcher.forward((ServletRequest)context.getRequest(), (ServletResponse)context.getResponse());
		return null;
	}
	
	public String doLogout(){
		FacesContext.getCurrentInstance().getExternalContext().invalidateSession();
		return "/logout.xhtml";
	}
}