<http pattern="/css/**" security="none"/> <http pattern="/views/index.jsp*" security="none"/> --- <http pattern="/login*" security="none"/> <http use-expressions="false"> <intercept-url pattern="/**" access="ROLE_ADMIN" /> <form-login login-page='/views/index.jsp'/> --- <form-login login-page='/login'/> </http>
原文:http://blog.51cto.com/xinzhilian/2088542