spring-security - 从 spring-security.xml 文件禁用 Spring Security

Question

请帮助我的建议。

我需要通过 xml 文件中的某个变量在我的应用程序上禁用/启用 spring 安全性。

我的 spring-security.xml 文件

<beans:beans xmlns="http://www.springframework.org/schema/security"
xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans 
    http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
    http://www.springframework.org/schema/security 
    http://www.springframework.org/schema/security/spring-security-3.1.xsd">

<http auto-config="true">
    <intercept-url pattern="/*" access="ROLE_ADMIN" />
    <logout logout-success-url="/mainpage" />
            <login login-success-url="/mainpage" />
</http>

<authentication-manager>
    <authentication-provider>
        <user-service>
            <user name="hey" password="there" authorities="ROLE_ADMIN" />
        </user-service>
    </authentication-provider>
</authentication-manager>

这怎么能执行呢？
谢谢。

Answer 1

security

A request pattern can be mapped to an empty filter chain, by setting this attribute to none. No security will be applied and none of Spring Security's features will be available.

http://static.springsource.org/spring-security/site/docs/3.1.x/reference/appendix-namespace.html#nsa-http-security
所以:

<http auto-config="true" security="none">

和往常一样，“none”参数可以是 springEL 表达式(无论如何都是子集)。
希望这是你要找的
编辑:
忘了说它的一个新特性是 Spring Security 3.1
http://static.springsource.org/spring-security/site/docs/3.1.x/reference/new-3.1.html#new-3.1-highlevel
编辑2:
对于更动态的解决方案，请使用 bean 配置文件。 http://static.springsource.org/spring/docs/3.1.x/spring-framework-reference/html/new-in-3.1.html#d0e1293和 http://blog.springsource.com/2011/02/11/spring-framework-3-1-m1-released/