<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>

    <listener>
        <listener-class>com.wikidsystems.server.StartupListener</listener-class>
    </listener>

    <servlet>
      <servlet-name>WiKIDConfig</servlet-name>
      <servlet-class>com.wikidsystems.util.Config</servlet-class>
      <load-on-startup>1</load-on-startup>
      <run-as>
        <description>Security role for anonymous access</description>
        <role-name>tomcat</role-name>
      </run-as>
    </servlet>

    <servlet>
        <servlet-name>InstallIMCertController</servlet-name>
        <servlet-class>com.wikidsystems.biz.web.mvc.controller.InstallIMCertController</servlet-class>
        <load-on-startup>1</load-on-startup>
        <run-as>
            <description>Security role for anonymous access</description>
            <role-name>tomcat</role-name>
        </run-as>
    </servlet>
    <servlet>
        <servlet-name>LicenceInfoController</servlet-name>
        <servlet-class>com.wikidsystems.biz.web.mvc.controller.LicenceInfoController</servlet-class>
        <load-on-startup>1</load-on-startup>
        <run-as>
            <description>Security role for anonymous access</description>
            <role-name>tomcat</role-name>
        </run-as>
    </servlet>
    <servlet>
        <servlet-name>Admin</servlet-name>
        <servlet-class>com.wikidsystems.api.Admin</servlet-class>
        <load-on-startup>1</load-on-startup>
        <run-as>
            <description>Security role for anonymous access</description>
            <role-name>tomcat</role-name>
        </run-as>
    </servlet>

    <servlet-mapping>
        <servlet-name>InstallIMCertController</servlet-name>
        <url-pattern>/instCert.htm</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>LicenceInfoController</servlet-name>
        <url-pattern>/licInfo.htm</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>WiKIDConfig</servlet-name>
        <url-pattern>/null</url-pattern>
    </servlet-mapping>

    <servlet-mapping>
        <servlet-name>Admin</servlet-name>
        <url-pattern>/admin-api</url-pattern>
    </servlet-mapping>

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>WiKID Admin Application</web-resource-name>
      <url-pattern>/*</url-pattern>
        <http-method>GET</http-method>
        <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>WiKIDAdmin</role-name>
    </auth-constraint>

    <user-data-constraint>
      <transport-guarantee>
                                CONFIDENTIAL
      </transport-guarantee>
    </user-data-constraint>
  </security-constraint>

    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Disallowed methods</web-resource-name>
            <url-pattern>/*</url-pattern>
            <http-method>PUT</http-method>
            <http-method>DELETE</http-method>
            <http-method>OPTIONS</http-method>
            <http-method>TRACE</http-method>
        </web-resource-collection>
        <user-data-constraint>
            <transport-guarantee>
                CONFIDENTIAL
            </transport-guarantee>
        </user-data-constraint>
    </security-constraint>


    <login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
      <form-login-page>/protected/login.jsp</form-login-page>
      <form-error-page>/protected/error.jsp</form-error-page>
    </form-login-config>
</login-config>

    <security-role id="tomcat">
        <role-name>tomcat</role-name>
    </security-role>

    <security-role id="WiKIDAdmin">
        <role-name>WiKIDAdmin</role-name>
    </security-role>
     <error-page>
         <error-code>404</error-code>
         <location>/errors/404.html</location>
     </error-page>

    <listener>
        <listener-class>com.wikidsystems.biz.web.listener.ACMInitListener</listener-class>
    </listener>

</web-app>