source: main/trunk/ibisph-view/src/main/webapp/WEB-INF/config/spring/SiteSpecific.xml @ 22591

Last change on this file since 22591 was 22591, checked in by GarthBraithwaite_STG, 3 months ago

java, view - readded QueryApplicationRequestProxyController?.java queryQueryApplicationProxyController config.

File size: 18.7 KB
Line 
1<?xml version="1.0" encoding="UTF-8"?>
2
3<beans default-lazy-init="false" default-autowire="no"
4        xmlns="http://www.springframework.org/schema/beans"
5        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
6        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd"
7>
8        <!--
9                This file has 3 functions:
10                1) Specify/load the application's spring bean definition files.
11                2) Provide the dispatcher servlet URL to controller mappings.
12                3) Override any spring bean definitions as per adopter's specific needs.
13                   Note that the properties file should be configured in this file IF
14                   they are needed/used.
15        -->
16
17        <!--
18                SPRING APPLICATION CONTENT DEFINITION FILES / SPRING BEAN IMPORTS
19                Specifies the Spring application context definition files which are
20                responsible for creating the application's objects.  To keep these
21                definitions more maintainable the bean definitions are stored in their
22                own file (beans are grouped by functionality).  There are two available
23                mechanisms to load these files:
24                1) web.xml - can specify a list of bean files to load.  Note that this
25                   mechanism is the same - the difference is that it only specifies
26                   this file.
27                2) This file can be used with the spring bean "import" mechanism.  This
28                   mechanism works the same way the XSLT import works with the last
29                   import taking precedence (which for imports is typically not a problem
30                   as they should be independent).  However, the 2nd part of this file
31                   allows for an adopter to override any bean definition OR the adopter
32                   can put all their overrides in a separate file and import that file
33                   last etc.
34
35                IMPORTANT IMPORT NOTES:
36                Some beans have dependencies on other beans so inclusion of 1 file
37                may result in the need for additional file(s).  The request dispatcher
38                URL to controller mappings require that all controller objects be
39                defined.  In either case if a bean references another bean and that
40                bean/object is not defined the application will not start (you will
41                see an error in the output log about bean definition missing/not found).
42               
43                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
44                !!! IMPORTANT - SECURITY CONFIGURATION !!!
45                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
46                When making security config changes consult ALL the notes and comments
47                within the security files and the admin webapp's security_notes.txt
48                file.  At some point someone will document this but for now these
49                comments should provide enough help for a java web developer to be
50                able to connect the dots.
51
52                If doing secure URLs at least two security definitions need to be
53                specified: the general (security.xml) and the specific security
54                configuration (security-xxx.xml) which supplements.
55        -->
56        <import resource="common.xml"/>
57        <import resource="filter.xml"/>
58
59        <import resource="security.xml"/>
60        <import resource="security-pre_authenticated.xml"/>
61        <import resource="security-db_authentication.xml"/>
62        <import resource="security-xml_authentication.xml"/>
63<!--
64        <import resource="security-no_authentication.xml"/>
65        <import resource="https.xml"/>
66-->
67
68        <import resource="indicator.xml"/>
69        <import resource="query.xml"/>
70        <import resource="query-definition.xml"/>
71        <import resource="publication.xml"/>
72        <import resource="community.xml"/>
73        <import resource="topic.xml"/>
74        <import resource="report.xml"/>
75        <import resource="secure.xml"/>
76        <import resource="user.xml"/>
77
78        <import resource="view.xml"/>
79
80
81        <bean id="siteSpecificDispatcherServletURLMap" class="java.util.HashMap">
82                <description>
83                        Defines the mapping of URL patterns to the appropriate IBIS-PH
84                        Controller.  The definitions are defined here and referenced in the
85                        dispacther_servlet.xml file because the ds.xml load occurs after
86                        this bean file is processed which would require an adopter to have
87                        to maintain and track the d_s.xml file.  Keeping them in this file
88                        also is the right place as this file contains the bean imports.
89                       
90                        IMPORTANT IMPORT NOTE:
91                        The request URLs to controller mapping MUST match the specified
92                        controller.  Otherwise the application will not start and the log
93                        will show an undefined bean error in the log.  Make sure that the
94                        imports match the needed controller.
95
96                        For example if secure query is wanted then the secure.xml spring bean
97                        controller definition file would need to imported.  The "secure" type
98                        requests would then need to be mapped to the respective controller.
99
100                        Note the first part of the controller name corresponds with the
101                        Spring bean definition file that includes that controller's
102                        definition (this is the case with all IBIS-PH Spring bean defs -
103                        they all have a prefix that is associated with the bean XML file.
104
105                        ORDERING: The best practice is to be order most specific to least.
106                </description>
107                <constructor-arg>
108                        <map>
109                                <!-- D E F A U L T   H T M L   C O N T E N T -->
110                                <entry key="/**/*.html" value-ref="viewHTMLContentConventionController"/>
111
112                                <!-- Note these will only get hit for defined web.xml blanket
113                                        mappings so requests like indicator/ or query/
114                                        but NOT about/ or topic/ as these have no web.xml mapping.
115                                -->
116                                <entry key="/*/"                value-ref="viewHTMLContentConventionController"/>
117
118                                <!-- T O P I C -->
119                                <entry key="/topic/**"                                          value-ref="topicHTMLContentConventionController"/>
120
121                                <!-- C O M M U N I T Y -->
122                                <entry key="/community/indicators/**"                   value-ref="communityIndicatorsReportController"/>
123                                <entry key="/community/indicator/**"                    value-ref="communityIndicatorReportController"/>
124                                <entry key="/community/facts/**"                                value-ref="communityFactsController"/>
125
126                                <!-- I N D I C A T O R  -->
127                                <entry key="/indicator/index/Alphabetical.html" value-ref="indicatorAlphabeticalIndexController"/>
128                                <entry key="/indicator/index/DataSource.html"   value-ref="indicatorDataSourceIndexController"/>
129                                <entry key="/indicator/index/Organization.html" value-ref="indicatorOrgUnitIndexController"/>
130                                <entry key="/indicator/index/Set.html"                  value-ref="indicatorIndicatorSetIndexController"/>
131                                <entry key="/indicator/index/Table.html"                value-ref="indicatorTableIndexController"/>
132                                <entry key="/indicator/index/Categorized.html"  value-ref="indicatorCategorizedIndexController"/>
133                                <entry key="/indicator/index/Demographic.html"  value-ref="indicatorDemographicIndexController"/>
134<!--
135                                <entry key="/indicator/default/*.html"     value-ref="indicatorDefaultViewController"/>
136-->
137                                <entry key="/indicator/summary/*.html"                  value-ref="indicatorSummaryViewController"/>
138                                <entry key="/indicator/view/*.html"                             value-ref="indicatorViewController"/>
139                                <entry key="/indicator/complete/*.html"                 value-ref="indicatorCompleteViewController"/>
140                                <entry key="/indicator/facts/*.html"                    value-ref="indicatorImportantFactsController"/>
141                                <entry key="/indicator/services/*.html"                 value-ref="indicatorServicesController"/>
142                                <entry key="/indicator/related/*/*.html"                value-ref="indicatorRelatedIndicatorsController"/>
143                                <entry key="/indicator/resources/*.html"                value-ref="indicatorResourcesController"/>
144
145                                <entry key="/indicator/view/*.json"                             value-ref="indicatorViewJSONController"/>
146                                <entry key="/indicator/*.json"                                  value-ref="indicatorJSONController"/>
147
148                                <entry key="/indicator/contentblocks/*.html"    value-ref="indicatorContentBlocksController"/>
149
150                                <entry key="/indicator/preview/*.html"                  value-ref="indicatorPreviewController"/>
151                                <entry key="/indicator/view/preview/*.html"             value-ref="indicatorViewPreviewController"/>
152
153                                <!-- Q U E R Y  -->
154                                <entry key="/query/selection/**"                                value-ref="querySelectionController"/>
155                                <entry key="/query/configuration/**"                    value-ref="queryConfigurationController"/>
156                                <entry key="/query/builder/**"                                  value-ref="queryBuilderController"/>
157                                <entry key="/query/submit/**/*.html"                    value-ref="querySubmitController"/>
158                                <entry key="/query/result/**/*.html"                    value-ref="queryResultController"/>
159                                <entry key="/query/result/**/*.xls"                             value-ref="queryResultController"/>     <!-- put here so can plug in Excel specifici controller in the future. -->
160                                <entry key="/query/result/**/*.xml"                             value-ref="queryIBISQResultController"/>       
161
162                                <entry key="/query/contentblocks/**"                    value-ref="queryResultContentBlocksController"/>
163
164
165                                <!-- Q U E R Y   D E F I N I T I O N -->
166                                <entry key="/query/definition/list/*"                   value-ref="queryDefinitionListController"/>
167                                <entry key="/query/definition/index/*"                  value-ref="queryDefinitionIndexController"/>
168                                <entry key="/query/definition/detail/*/*"               value-ref="queryDefinitionDetailController"/>
169
170                                <entry key="/query/definition/result/*/*"               value-ref="queryDefinitionResultController"/>
171                                <entry key="/query/definition/builder/*/*"              value-ref="queryDefinitionBuilderController"/>
172                                <entry key="/query/definition/contentblocks/**" value-ref="queryDefinitionResultContentBlocksController"/>
173
174                                <entry key="/query/definition/save"                             value-ref="queryDefinitionSaveController"/>
175                                <entry key="/query/definition/delete/*"                 value-ref="queryDefinitionDeleteController"/>
176                                <entry key="/query/definition/set_apply"                value-ref="queryModuleToApplyQueryDefinitionController"/>
177
178                                <!-- IMPORTANT NOTICE: If there are sensitive datasets that are
179                                        exposed via a Query Module and the IBISPH-VIEW to IBIS-Q
180                                        then this proxy should either a) be removed from this file
181                                        or b) have the proxy's application URL point to an invalid
182                                        URL or c) protect the request via spring security.  Also
183                                        make sure that all of those sensitive dataset URL requests
184                                        are protected and that the backend IBIS-Q CGI application
185                                        is not made available except to the ibisph-view webapp.
186                                -->
187                                <entry key="/query/proxy*"                      value-ref="queryQueryApplicationProxyController"/>
188
189
190                                <!-- S E C U R E  -->
191                                <entry key="/secure"                                                    value-ref="secureSelectionController"/>
192                                <entry key="/secure/test.jsp"                                   value-ref="secureTestController"/>
193                                <entry key="/secure/selection/*.html"                   value-ref="secureSelectionController"/>
194                                <entry key="/secure/query/selection/**"                 value-ref="secureQuerySelectionController"/>
195                                <entry key="/secure/query/builder/**"                   value-ref="secureQueryBuilderController"/>
196                                <entry key="/secure/query/submit/**/*.html"             value-ref="secureQuerySubmitController"/>
197                                <entry key="/secure/query/result/**/*.html"             value-ref="secureQueryResultController"/>
198                                <entry key="/secure/query/result/**/*.xls"              value-ref="secureQueryResultController"/>
199                                <entry key="/secure/query/result/**/*.xml"              value-ref="secureQueryIBISQResultController"/> 
200                                <entry key="/secure/query/configuration/**"             value-ref="queryConfigurationController"/>
201
202                                <entry key="/secure/query/definition/result/*/*"        value-ref="secureQueryDefinitionResultController"/>
203                                <entry key="/secure/query/definition/builder/*/*"       value-ref="secureQueryDefinitionBuilderController"/>
204
205
206                                <!-- R E P O R T -->
207                                <entry key="/report/*/*/*.html"                                 value-ref="reportIndicatorViewController"/>
208                                <entry key="/report/*/*.html"                                   value-ref="reportHTMLContentController"/>
209
210
211                                <!-- U S E R   P R O F I L E -->
212                                <entry key="/user/Login.html"                                   value-ref="userLoginController"/>
213                                <entry key="/user/Selections.html"                              value-ref="userSelectionsController"/>
214
215                                <entry key="/user/Registration.html"                    value-ref="userEditRegistrationController"/>
216                                <entry key="/user/registration/save"                    value-ref="userSaveRegistrationController"/>
217                                <entry key="/user/registration/verify/**"               value-ref="userVerifyRegistrationController"/>
218
219                                <entry key="/user/Access.html"                                  value-ref="userAccessController"/>
220                                <entry key="/user/status"                                               value-ref="userStatusController"/>
221                                <entry key="/user/access/email"                                 value-ref="userEmailAccessController"/>
222
223<!-- These should be implemented inplace of above requests.
224                                <entry key="/user/Profile.html"                                 value-ref="userEditProfileController"/>
225                                <entry key="/user/profile/save"                                 value-ref="userSaveProfileController"/>
226                                <entry key="/user/profile/delete"                               value-ref="userDeleteProfileController"/>
227
228doesn't work:
229<entry key="/user/Login.json"           value-ref="securityAjaxLoginController"/>
230-->
231
232                                <!-- S E A R C H
233                                <entry key="/search" value-ref="viewSearchController"/>
234-->
235
236                                <!-- G E N E R I C   T R A S F O R M A T I O N -->
237                                <!--
238                                        This controller is needed for adhoc system reports to work. 
239                                        At one point it was thought to not enable this controller as
240                                        it could be a potential security risk because it would bypass
241                                        the spring security mechanism.  However, this is NOT the case
242                                        as the controller only can access xml files within its
243                                        configuration limitation or via the xmlURL request parameter. 
244                                        In either case if there were sensitive data in these files
245                                        they should NEVER be placed in a non secured, public facing
246                                        webapp/directory. 
247
248                                        To be safe, it is probably still best to remove this request
249                                        from production deployements.  It should only be enabled for
250                                        local query module development and testing environment where
251                                        the QM developer wants to test their XML files.
252                                -->
253                                <entry key="/view.html"                 value-ref="viewHTTPXMLXSLTRequestParameterController"/>
254
255                                <!-- F I L E   C O N T E N T   S T R E A M E R -->
256                                <entry key="/view/WEB-INF/**"   value-ref="viewAccessDeniedController"/>
257                                <entry key="/view/**"                   value-ref="viewGetFileController"/>
258
259                        </map>
260                </constructor-arg>
261        </bean>
262
263
264        <!--
265                ADOPTER BEAN DEFINITION OVERRIDES AND PROPERTY OVERRIDES
266                This section provides the adopter a mechanism to override bean definitions
267                and property values.  Theses bean definitions should be listed AFTER ALL
268                imported bean files. 
269        -->
270
271        <bean id="siteSpecificPropertyOverrides" class="org.springframework.beans.factory.config.PropertyOverrideConfigurer">
272                <description>
273                        Defines optional special property file(s) that contain property
274                        overrides.  These differ in that the beanID:propertyName is on the
275                        left side with the right containing the value to be injected into
276                        the bean.  Property files are only able to provide string and numeric
277                        type data values/value overrides.  These property files are optional
278                        and might not want to be/need to be used by an adopter to keep their
279                        configuration files more concise and simpler - the property values
280                        can simply be placed in this file.  Where property files are of
281                        value is when being deployed to different servers where each server
282                        has it's own file path, IBISQ url, JNDI name, etc.
283
284                        The locations define where these override files could be located.
285                        If one exists in all directories then the last definition is the
286                        value that eventually is used.  If the file does not exist the
287                        ignore setting specifies to move on.  If false and a file is not
288                        found then the app will not start. 
289
290                        For local development in MS-Windows put a ibisph-view.properties
291                        property override file in your c:\users\your_username directory.
292                        Only include those values needed to override/supplement your
293                        current settings already specified.
294
295                        IMPORTANT NOTES: If you have the files located outside of the webapp
296                        container you need to make sure that the file privs are setup
297                        correctly.  The ${user.home} is a special environment value that
298                        should work for Windows and Linux - again make sure of file privs.
299
300                        Property files can inject string/numeric property values into an
301                        existing object/defined bean.  Beans files define objects and that
302                        object's properties/dependent objects.
303                </description>
304                <property name="ignoreResourceNotFound" value="true"/>
305                <property name="locations">
306                        <list>
307                                <value>WEB-INF/config/SiteSpecific.properties</value>
308                                <value>file:../ibisph-view_core.properties</value>
309                                <value>file:${user.home}/ibisph-view_core.properties</value>
310                        </list>
311                </property>
312        </bean>
313
314        <!-- IBISQ REQUEST URL EXAMPLE OF NOT USING THE ABOVE property override file:
315        <bean id="queryQueryApplicationRequestBasePath" class="org.ibisph.model.StringHolder">
316                <constructor-arg value="http://123.222.100.33:8080/cgi-bin/hi_iq_func.exe"/>
317        </bean>
318        -->
319
320
321        <!-- This method invoke call verifies the existance of the published
322                indicators XML file.  If it does not exist then creates it based on the
323                existing IP XML files.  This is useful for new deployments or if the XML
324                is corrupt etc.  Typically used when the adopter wants to rebuild the
325                XML (1. delete the published IPs XML file, 2. restart the app).  The
326                admin app is responsible to maintain the published IPs XML file via an
327                IP publish request so this call should not be needed.  It is provided as
328                a safety feature that some direct content adopters may want to include.
329
330                REMOTE CONTENT NOTE: this verify service is of no value as the content
331                is located on a different server and thus can NOT create, update, delete
332                this file.  For remote content the IPs XML and published IPs XML file is
333                either managed by the admin app's publishing or by an adopter manually
334                maintaining their content.
335        <bean id="siteSpecificVerifyPublishedIndicatorsXMLFileService"
336                class="org.springframework.beans.factory.config.MethodInvokingFactoryBean"
337        >
338                <property name="targetObject">
339                        <bean class="org.ibisph.indicatorprofile.service.PublishedIndicatorsXML">
340                                <property name="publishedIndicatorsFilePathAndName" value="#{indicatorPublishedIndicatorsFilePathAndName.string}"/>
341                                <property name="indicatorProfileFilePath" value="#{indicatorProfileFilePath.string}"/>
342                                <property name="documentDAOService"             ref="commonDocumentDAOService"/>
343                        </bean>
344                </property>
345                <property name="targetMethod" value="verifyPublishedIndicatorsXMLFile"/>
346        </bean>
347        -->
348
349
350        <bean id="securityAuthenticationProviderList" class="java.util.ArrayList">
351                <description>
352                        Defines the types of provides to be used for authenticating a user.
353                        This list can be 1:n with the first being tried then the next etc
354                        until successful/all providers have been tried.
355
356                        Note that you MUST have the appropriate/associated spring bean xml
357                        file included/imported to be able to use the selected provider.
358                </description>
359                <constructor-arg>
360                        <list>
361                                <ref bean="securityPreAuthenticatedAuthenticationProvider"/>
362                                <ref bean="securityDBAuthenticationProvider"/>
363                                <ref bean="securityXMLAuthenticationProvider"/>
364                        </list>
365                </constructor-arg>
366        </bean>
367
368        <!-- For development use the standard, non caching XSLT transformer.  Default
369                common is the caching version: org.ibisph.xslt.CachedSaxonTransformerFactory.
370        -->
371        <bean id="commonXSLTTransformerFactory" class="net.sf.saxon.TransformerFactoryImpl"/>
372
373</beans>
Note: See TracBrowser for help on using the repository browser.