<commit_before><?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:util="http://www.springframework.org/schema/util"
        xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
			    http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-2.0.xsd
                            http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.3.xsd">
                                       
    
   <security:ldap-server id="ldapAuthServer" url="${ldap.url}/${ldap.base}"/>
   
    <bean id="ldapAuthProvider" class="org.springframework.security.ldap.authentication.LdapAuthenticationProvider">
     <constructor-arg>
       <bean class="org.springframework.security.ldap.authentication.BindAuthenticator">
           <constructor-arg ref="ldapAuthServer"/>
           <property name="userDnPatterns"><list><value>uid={0},ou=People</value></list></property>
       </bean>
     </constructor-arg>
     <constructor-arg>
       <bean class="org.synyx.urlaubsverwaltung.security.AuthoritiesPopulatorImpl" />
     </constructor-arg>
   </bean>

    <security:http auto-config='true' use-expressions='true'>
        <security:intercept-url pattern="/jmx/**" access="isAuthenticated()"/>
         <security:intercept-url pattern="/web/**" access="isAuthenticated()"/>
         <security:intercept-url pattern="/login.jsp" access="permitAll"/>
         <security:intercept-url pattern="/messages_de.properties" access="permitAll"/>
         <security:intercept-url pattern="/messages_en.properties" access="permitAll"/>
         <security:intercept-url pattern="/images/synyx-logo-transp.jpg" access="permitAll"/>
         <security:form-login login-page="/login.jsp" always-use-default-target="true" default-target-url="/web/overview" authentication-failure-url="/login.jsp?login_error=1"/>
         <security:logout logout-success-url="/web/login"/>
     </security:http>
    
    <security:authentication-manager alias="authenticationManager">
        <security:authentication-provider ref="ldapAuthProvider" />
    </security:authentication-manager>    

</beans>
<commit_msg>sick note security: only office should have access<commit_after><?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:util="http://www.springframework.org/schema/util"
        xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
			    http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-2.0.xsd
                            http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.3.xsd">
                                       
    
   <security:ldap-server id="ldapAuthServer" url="${ldap.url}/${ldap.base}"/>
   
    <bean id="ldapAuthProvider" class="org.springframework.security.ldap.authentication.LdapAuthenticationProvider">
     <constructor-arg>
       <bean class="org.springframework.security.ldap.authentication.BindAuthenticator">
           <constructor-arg ref="ldapAuthServer"/>
           <property name="userDnPatterns"><list><value>uid={0},ou=People</value></list></property>
       </bean>
     </constructor-arg>
     <constructor-arg>
       <bean class="org.synyx.urlaubsverwaltung.security.AuthoritiesPopulatorImpl" />
     </constructor-arg>
   </bean>

    <security:http auto-config='true' use-expressions='true'>
         <security:intercept-url pattern="/jmx/**" access="isAuthenticated()"/>
         <security:intercept-url pattern="/web/overview" access="isAuthenticated()"/>
         <security:intercept-url pattern="/web/application/**" access="isAuthenticated()"/>
         <security:intercept-url pattern="/web/sicknote/**" access="hasRole('role.office')"/>
        <security:intercept-url pattern="/web/staff/**" access="hasAnyRole('role.boss', 'role.office')"/>
         <security:intercept-url pattern="/web/management/**" access="hasRole('role.admin')"/>
         <security:intercept-url pattern="/login.jsp" access="permitAll"/>
         <security:intercept-url pattern="/messages_de.properties" access="permitAll"/>
         <security:intercept-url pattern="/messages_en.properties" access="permitAll"/>
         <security:intercept-url pattern="/images/synyx-logo-transp.jpg" access="permitAll"/>
         <security:form-login login-page="/login.jsp" always-use-default-target="true" default-target-url="/web/overview" authentication-failure-url="/login.jsp?login_error=1"/>
         <security:logout logout-success-url="/login.jsp"/>
     </security:http>
    
    <security:authentication-manager alias="authenticationManager">
        <security:authentication-provider ref="ldapAuthProvider" />
    </security:authentication-manager>    

</beans>

{'fraction_non_alphanumeric': 0.16650790626786055, 'fraction_numerical': 0.005715374357020385, 'mean_word_length': 3.7425474254742546, 'pattern_counts': {'":': 0, '<': 73, '<?xml version=': 2, '>': 73, 'https://': 0, 'lorem ipsum': 0, 'www.': 20, 'xml': 10}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 2, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3617688', 'n_tokens_mistral': 1547, 'n_tokens_neox': 1515, 'n_words': 158}