<?xml version="1.0" encoding="UTF-8"?>

<srv:container xmlns="http://symfony.com/schema/dic/security"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:srv="http://symfony.com/schema/dic/services"
    xsi:schemaLocation="http://symfony.com/schema/dic/services http://symfony.com/schema/dic/services/services-1.0.xsd">

    <config>
        <acl />

        <encoder class="JMS\FooBundle\Entity\User1" algorithm="plaintext" />

        <encoder class="JMS\FooBundle\Entity\User2" algorithm="sha1" encode-as-base64="false" iterations="5" />

        <encoder class="JMS\FooBundle\Entity\User3" algorithm="md5" />

        <encoder class="JMS\FooBundle\Entity\User4" id="security.encoder.foo" />

        <provider name="default">
            <user name="foo" password="foo" roles="ROLE_USER" />
        </provider>

        <provider name="digest">
            <user name="foo" password="foo" roles="ROLE_USER, ROLE_ADMIN" />
        </provider>

        <provider name="basic">
            <user name="foo" password="0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33" roles="ROLE_SUPER_ADMIN" />
            <user name="bar" password="0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33" roles="ROLE_USER, ROLE_ADMIN" />
        </provider>

        <provider name="doctrine">
            <entity class="SecurityBundle:User" property="username" />
        </provider>

        <provider name="service" id="user.manager" />

        <provider name="chain" providers="service, doctrine, basic" />

        <firewall name="simple" pattern="/login" security="false" />

        <firewall name="secure" stateless="true">
            <http-basic />
            <http-digest />
            <form-login />
            <anonymous />
            <switch-user />
            <x509 />
            <logout />
        </firewall>

        <role id="ROLE_ADMIN">ROLE_USER</role>
        <role id="ROLE_SUPER_ADMIN">ROLE_USER,ROLE_ADMIN,ROLE_ALLOWED_TO_SWITCH</role>
        <role id="ROLE_REMOTE">ROLE_USER,ROLE_ADMIN</role>

        <rule path="/blog/524" role="ROLE_USER" requires-channel="https" />
        <rule role='IS_AUTHENTICATED_ANONYMOUSLY' path="/blog/.*" />
    </config>
</srv:container>
