Duplicated security configuration
Duplicated security configuration
// locations to search for config files that get merged into the main config;
// config files can be ConfigSlurper scripts, Java properties files, or classes
// in the classpath in ConfigSlurper format

grails.config.locations = [ "file:${userHome}/thepieuvre/thepieuvre-config.groovy" ]
//                             "classpath:${appName}-config.properties",
//                             "classpath:${appName}-config.groovy",
//                             "file:${userHome}/.grails/${appName}-config.properties",
//                             "file:${userHome}/.grails/${appName}-config.groovy"]

// if (System.properties["${appName}.config.location"]) {
//    grails.config.locations << "file:" + System.properties["${appName}.config.location"]
// }

grails.project.groupId = appName // change this to alter the default package name and Maven publishing destination
grails.mime.file.extensions = true // enables the parsing of file extensions from URLs into the request format
grails.mime.use.accept.header = false
grails.mime.types = [
    all:           '*/*',
    atom:          'application/atom+xml',
    css:           'text/css',
    csv:           'text/csv',
    form:          'application/x-www-form-urlencoded',
    html:          ['text/html','application/xhtml+xml'],
    js:            'text/javascript',
    json:          ['application/json', 'text/json'],
    multipartForm: 'multipart/form-data',
    rss:           'application/rss+xml',
    text:          'text/plain',
    xml:           ['text/xml', 'application/xml']
]

// URL Mapping Cache Max Size, defaults to 5000
//grails.urlmapping.cache.maxsize = 1000

// What URL patterns should be processed by the resources plugin
grails.resources.adhoc.patterns = ['/images/*', '/css/*', '/js/*', '/plugins/*']

// The default codec used to encode data with ${}
grails.views.default.codec = "none" // none, html, base64
grails.views.gsp.encoding = "UTF-8"
grails.converters.encoding = "UTF-8"
// enable Sitemesh preprocessing of GSP pages
grails.views.gsp.sitemesh.preprocess = true
// scaffolding templates configuration
grails.scaffolding.templates.domainSuffix = 'Instance'

// Set to false to use the new Grails 1.2 JSONBuilder in the render method
grails.json.legacy.builder = false
// enabled native2ascii conversion of i18n properties files
grails.enable.native2ascii = true
// packages to include in Spring bean scanning
grails.spring.bean.packages = []
// whether to disable processing of multi part requests
grails.web.disable.multipart=false

// request parameters to mask when logging exceptions
grails.exceptionresolver.params.exclude = ['password']

// configure auto-caching of queries by default (if false you can cache individual queries with 'cache: true')
grails.hibernate.cache.queries = false

environments {
    development {

      grails.serverURL = "http://localhost:8080/thepieuvre"

      grails.logging.jul.usebridge = true

      thepieuvre.util.secret = "changeme"
      thepieuvre.mailalert = 'alex@thepieuvre.com'

      thepieuvre.member.limit = 5

      grails.mail.default.from="noreply@thepieuvre.com"

        // Put in "file:${userHome}/thepieuvre/thepieuvre-config.groovy"
        //grails {
        // mail {
        //         overrideAddress="youremail@email.com"
        //         host = "smtp.mail.com"
        //         port = 465
        //         username = "XXXX"
        //         password = "YYYY"
        //         props = ["mail.smtp.auth":"true",
        //                 "mail.smtp.socketFactory.port":"465",
        //                 "mail.smtp.socketFactory.class":"javax.net.ssl.SSLSocketFactory",
        //                 "mail.smtp.socketFactory.fallback":"false"]
        // }
        //}

      grails {
        redis {
          poolConfig {
            // jedis pool specific tweaks here, see jedis docs & src
            // ex: testWhileIdle = true
          }
          port = 6379
          host = "localhost"
          timeout = 30000 //default in milliseconds
          //password = "somepassword" //defaults to no password
      }
}

    }
    production {
        grails.logging.jul.usebridge = false
        grails.dbconsole.enabled = false // set true for enabling dbConsole -- H2 only

  }
}

// Added by the Spring Security Core plugin:
grails.plugins.springsecurity.userLookup.userDomainClassName = 'thepieuvre.security.User'
grails.plugins.springsecurity.userLookup.authorityJoinClassName = 'thepieuvre.security.UserRole'
grails.plugins.springsecurity.authority.className = 'thepieuvre.security.Role'

// Security Configuration
grails.plugins.springsecurity.rejectIfNoRule     = true
grails.plugins.springsecurity.useX509            = false
grails.plugins.springsecurity.useBasicAuth       = true
grails.plugins.springsecurity.auth.loginFormUrl = '/login/auth'
grails.plugins.springsecurity.password.algorithm = 'SHA-512'
grails.plugins.springsecurity.cacheUsers = false
grails.plugins.springsecurity.basic.realmName = 'THE-PIEUVRE'

grails.plugins.springsecurity.securityConfigType = 'Annotation'
grails.plugins.springsecurity.controllerAnnotations.staticRules = [
    '/login/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
    '/logout/**': ['IS_AUTHENTICATED_FULLY', 'IS_AUTHENTICATED_ANONYMOUSLY'],
    '/images/**': ['permitAll'],
    '/css/**': ['permitAll'],
    '/js/**': ['permitAll'],
    '/error/**': ['permitAll'],
    '/api/**': ['IS_AUTHENTICATED_FULLY'],
    '/console/**': ['ROLE_ROOT'],
    '/monitoring/**': ['ROLE_ROOT'],
    '/dbconsole/**': ['ROLE_ROOT'],
    '/hermes/**': ['ROLE_ROOT'],
    '/admin/**': ['IS_AUTHENTICATED_FULLY'],
    '/welcome/**': ['permitAll'],
    '/member/**': ['IS_AUTHENTICATED_FULLY','IS_AUTHENTICATED_ANONYMOUSLY'],
    '/': ['permitAll'],
    '/robots.txt': ['permitAll'],
    '/**': ['IS_AUTHENTICATED_FULLY']
]

grails.plugins.springsecurity.filterChain.filterNames = [
  'securityContextPersistenceFilter',
  'logoutFilter',
  'authenticationProcessingFilter',
  'basicAuthenticationFilter',
  'anonymousAuthenticationFilter',
  'basicExceptionTranslationFilter',
  'exceptionTranslationFilter',
  'filterInvocationInterceptor'
]

grails.plugins.springsecurity.filterChain.chainMap = [
  '/**': 'JOINED_FILTERS'
]

grails.plugins.springsecurity.providerNames = [
  'daoAuthenticationProvider',
  'anonymousAuthenticationProvider'
]

grails.plugins.springsecurity.roleHierarchy = '''
  ROLE_ROOT > ROLE_FEED_MANAGER
  ROLE_ROOT > ROLE_MEMBER_MANAGER
  ROLE_ROOT > ROLE_COMMAND_MANAGER
'''


// log4j configuration
log4j = {

  appenders {
    console name:'stdout', layout:pattern(conversionPattern: '%d{ABSOLUTE} %5p %10X{user} [%t] %c{4}:%L - %m%n')
  }

  root {
    info  'stdout'
  }

  error  'org.codehaus.groovy.grails.web.servlet',  //  controllers
         'org.codehaus.groovy.grails.web.pages', //  GSP
         'org.codehaus.groovy.grails.web.sitemesh', //  layouts
         'org.codehaus.groovy.grails.web.mapping.filter', // URL mapping
         'org.codehaus.groovy.grails.web.mapping', // URL mapping
         'org.codehaus.groovy.grails.commons', // core / classloading
         'org.codehaus.groovy.grails.plugins', // plugins
         'org.codehaus.groovy.grails.orm.hibernate', // hibernate integration
         'org.springframework',
         'org.hibernate',
         'net.sf.ehcache.hibernate'

  info  'grails.app.taglib'

  warn  'org.mortbay.log'

  debug 'grails.app', 'thepieuvre'
}

// locations to search for config files that get merged into the main config;
// config files can be ConfigSlurper scripts, Java properties files, or classes
// in the classpath in ConfigSlurper format

grails.config.locations = [ "file:${userHome}/thepieuvre/thepieuvre-config.groovy" ]
//                             "classpath:${appName}-config.properties",
//                             "classpath:${appName}-config.groovy",
//                             "file:${userHome}/.grails/${appName}-config.properties",
//                             "file:${userHome}/.grails/${appName}-config.groovy"]

// if (System.properties["${appName}.config.location"]) {
//    grails.config.locations << "file:" + System.properties["${appName}.config.location"]
// }

grails.project.groupId = appName // change this to alter the default package name and Maven publishing destination
grails.mime.file.extensions = true // enables the parsing of file extensions from URLs into the request format
grails.mime.use.accept.header = false
grails.mime.types = [
    all:           '*/*',
    atom:          'application/atom+xml',
    css:           'text/css',
    csv:           'text/csv',
    form:          'application/x-www-form-urlencoded',
    html:          ['text/html','application/xhtml+xml'],
    js:            'text/javascript',
    json:          ['application/json', 'text/json'],
    multipartForm: 'multipart/form-data',
    rss:           'application/rss+xml',
    text:          'text/plain',
    xml:           ['text/xml', 'application/xml']
]

// URL Mapping Cache Max Size, defaults to 5000
//grails.urlmapping.cache.maxsize = 1000

// What URL patterns should be processed by the resources plugin
grails.resources.adhoc.patterns = ['/images/*', '/css/*', '/js/*', '/plugins/*']

// The default codec used to encode data with ${}
grails.views.default.codec = "none" // none, html, base64
grails.views.gsp.encoding = "UTF-8"
grails.converters.encoding = "UTF-8"
// enable Sitemesh preprocessing of GSP pages
grails.views.gsp.sitemesh.preprocess = true
// scaffolding templates configuration
grails.scaffolding.templates.domainSuffix = 'Instance'

// Set to false to use the new Grails 1.2 JSONBuilder in the render method
grails.json.legacy.builder = false
// enabled native2ascii conversion of i18n properties files
grails.enable.native2ascii = true
// packages to include in Spring bean scanning
grails.spring.bean.packages = []
// whether to disable processing of multi part requests
grails.web.disable.multipart=false

// request parameters to mask when logging exceptions
grails.exceptionresolver.params.exclude = ['password']

// configure auto-caching of queries by default (if false you can cache individual queries with 'cache: true')
grails.hibernate.cache.queries = false

environments {
    development {

      grails.serverURL = "http://localhost:8080/thepieuvre"

      grails.logging.jul.usebridge = true

      thepieuvre.util.secret = "changeme"
      thepieuvre.mailalert = 'alex@thepieuvre.com'

      thepieuvre.member.limit = 5

      grails.mail.default.from="noreply@thepieuvre.com"

        // Put in "file:${userHome}/thepieuvre/thepieuvre-config.groovy"
        //grails {
        // mail {
        //         overrideAddress="youremail@email.com"
        //         host = "smtp.mail.com"
        //         port = 465
        //         username = "XXXX"
        //         password = "YYYY"
        //         props = ["mail.smtp.auth":"true",
        //                 "mail.smtp.socketFactory.port":"465",
        //                 "mail.smtp.socketFactory.class":"javax.net.ssl.SSLSocketFactory",
        //                 "mail.smtp.socketFactory.fallback":"false"]
        // }
        //}

      grails {
        redis {
          poolConfig {
            // jedis pool specific tweaks here, see jedis docs & src
            // ex: testWhileIdle = true
          }
          port = 6379
          host = "localhost"
          timeout = 30000 //default in milliseconds
          //password = "somepassword" //defaults to no password
      }
}

    }
    production {
        grails.logging.jul.usebridge = false
        grails.dbconsole.enabled = false // set true for enabling dbConsole -- H2 only

  }
}

// Added by the Spring Security Core plugin:
grails.plugins.springsecurity.userLookup.userDomainClassName = 'thepieuvre.security.User'
grails.plugins.springsecurity.userLookup.authorityJoinClassName = 'thepieuvre.security.UserRole'
grails.plugins.springsecurity.authority.className = 'thepieuvre.security.Role'

// Security Configuration
grails.plugins.springsecurity.rejectIfNoRule     = true
grails.plugins.springsecurity.securityConfigType = "InterceptUrlMap"
grails.plugins.springsecurity.useX509            = false
grails.plugins.springsecurity.useBasicAuth       = true
grails.plugins.springsecurity.auth.loginFormUrl = '/login/auth'
grails.plugins.springsecurity.password.algorithm = 'SHA-512'
grails.plugins.springsecurity.securityConfigType = "Annotation"
grails.plugins.springsecurity.cacheUsers = false
grails.plugins.springsecurity.basic.realmName = 'THE-PIEUVRE'

grails.plugins.springsecurity.securityConfigType = 'Annotation'
grails.plugins.springsecurity.controllerAnnotations.staticRules = [
    '/login/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
    '/logout/**': ['IS_AUTHENTICATED_FULLY', 'IS_AUTHENTICATED_ANONYMOUSLY'],
    '/images/**': ['permitAll'],
    '/css/**': ['permitAll'],
    '/js/**': ['permitAll'],
    '/error/**': ['permitAll'],
    '/api/**': ['IS_AUTHENTICATED_FULLY'],
    '/console/**': ['ROLE_ROOT'],
    '/monitoring/**': ['ROLE_ROOT'],
    '/dbconsole/**': ['ROLE_ROOT'],
    '/hermes/**': ['ROLE_ROOT'],
    '/admin/**': ['IS_AUTHENTICATED_FULLY'],
    '/welcome/**': ['permitAll'],
    '/member/**': ['IS_AUTHENTICATED_FULLY','IS_AUTHENTICATED_ANONYMOUSLY'],
    '/': ['permitAll'],
    '/robots.txt': ['permitAll'],
    '/**': ['IS_AUTHENTICATED_FULLY']
]

grails.plugins.springsecurity.filterChain.filterNames = [
  'securityContextPersistenceFilter',
  'logoutFilter',
  'authenticationProcessingFilter',
  'basicAuthenticationFilter',
  'anonymousAuthenticationFilter',
  'basicExceptionTranslationFilter',
  'exceptionTranslationFilter',
  'filterInvocationInterceptor'
]

grails.plugins.springsecurity.filterChain.chainMap = [
  '/**': 'JOINED_FILTERS'
]

grails.plugins.springsecurity.providerNames = [
  'daoAuthenticationProvider',
  'anonymousAuthenticationProvider'
]

grails.plugins.springsecurity.roleHierarchy = '''
  ROLE_ROOT > ROLE_FEED_MANAGER
  ROLE_ROOT > ROLE_MEMBER_MANAGER
  ROLE_ROOT > ROLE_COMMAND_MANAGER
'''


// log4j configuration
log4j = {

  appenders {
    console name:'stdout', layout:pattern(conversionPattern: '%d{ABSOLUTE} %5p %10X{user} [%t] %c{4}:%L - %m%n')
  }

  root {
    info  'stdout'
  }

  error  'org.codehaus.groovy.grails.web.servlet',  //  controllers
         'org.codehaus.groovy.grails.web.pages', //  GSP
         'org.codehaus.groovy.grails.web.sitemesh', //  layouts
         'org.codehaus.groovy.grails.web.mapping.filter', // URL mapping
         'org.codehaus.groovy.grails.web.mapping', // URL mapping
         'org.codehaus.groovy.grails.commons', // core / classloading
         'org.codehaus.groovy.grails.plugins', // plugins
         'org.codehaus.groovy.grails.orm.hibernate', // hibernate integration
         'org.springframework',
         'org.hibernate',
         'net.sf.ehcache.hibernate'

  info  'grails.app.taglib'

  warn  'org.mortbay.log'

  debug 'grails.app', 'thepieuvre'
}
