<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:beans="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans
    http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
    http://www.springframework.org/schema/security
    http://www.springframework.org/schema/security/spring-security-3.0.3.xsd">

    <beans:import resource="/hibernate-config.xml"/>
    <beans:import resource="/spring-config.xml"/>

    <http auto-config="true">
        <intercept-url pattern="/admin/**" access="ROLE_ADMIN" />
        <intercept-url pattern="/user/**" access="ROLE_USER,ROLE_ADMIN" />
        <form-login login-page='/login' authentication-failure-url="/login?login_error=1" default-target-url="/" />
    </http>

    <authentication-manager>
        <authentication-provider user-service-ref="customUserDetailsService">
            <password-encoder hash="sha-256" />
        </authentication-provider>
    </authentication-manager>

    <beans:bean id="customUserDetailsService" class="lt.database.service.CustomUserLoginService"/>
</beans:beans>