설정 간소화

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:egov-security="http://maven.egovframe.go.kr/schema/egov-security"
	xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd
		http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd
		http://maven.egovframe.go.kr/schema/egov-security http://maven.egovframe.go.kr/schema/egov-security/egov-security-4.2.0.xsd">

<egov-security:config id="securityConfig"
	loginUrl="/uat/uia/egovLoginUsr.do"
	logoutSuccessUrl="/EgovContent.do"
	loginFailureUrl="/uat/uia/egovLoginUsr.do?login_error=1"
	accessDeniedUrl="/sec/ram/accessDenied.do"
 
	dataSource="egov.dataSource"
	jdbcUsersByUsernameQuery="SELECT USER_ID, ESNTL_ID AS PASSWORD, 1 ENABLED, USER_NM, USER_ZIP,
                                  USER_ADRES, USER_EMAIL, USER_SE, ORGNZT_ID, ESNTL_ID,
                                  (select a.ORGNZT_NM from COMTNORGNZTINFO a where a.ORGNZT_ID = m.ORGNZT_ID) ORGNZT_NM
                                  FROM COMVNUSERMASTER m WHERE CONCAT(USER_SE, USER_ID) = ?"
	jdbcAuthoritiesByUsernameQuery="SELECT A.SCRTY_DTRMN_TRGET_ID USER_ID, A.AUTHOR_CODE AUTHORITY
                                        FROM COMTNEMPLYRSCRTYESTBS A, COMVNUSERMASTER B
                                        WHERE A.SCRTY_DTRMN_TRGET_ID = B.ESNTL_ID AND B.USER_ID = ?"
	jdbcMapClass="egovframework.com.sec.security.common.EgovSessionMapping"
 
	requestMatcherType="regex"
	hash="plaintext"
	hashBase64="false"
 
	concurrentMaxSessons="1"
	concurrentExpiredUrl="/EgovContent.do"
	errorIfMaximumExceeded="false"
 
	defaultTargetUrl="/EgovContent.do"
	alwaysUseDefaultTargetUrl="true"
 
	sniff="true"
	xframeOptions="SAMEORIGIN" 
	xssProtection="true" 
	cacheControl="false"
	csrf="false"
	csrfAccessDeniedUrl="/egovCSRFAccessDenied.do"
/>

<egov-security:initializer
	id="initializer"
	supportPointcut="true"
/>

<egov-security:secured-object-config
	id="securedObjectConfig"
	roleHierarchyString="
			ROLE_ADMIN > ROLE_USER
			ROLE_USER > ROLE_RESTRICTED
			ROLE_RESTRICTED > IS_AUTHENTICATED_FULLY
			IS_AUTHENTICATED_FULLY >	IS_AUTHENTICATED_REMEMBERED
			IS_AUTHENTICATED_REMEMBERED > IS_AUTHENTICATED_ANONYMOUSLY"
	sqlRolesAndUrl="
			SELECT auth.URL url, code.CODE_NM authority
			FROM RTETNAUTH auth, RTETCCODE code
			WHERE code.CODE_ID = auth.MNGR_SE"
/>