<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="2.4" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
<servlet>
<servlet-name>CIMOMServlet</servlet-name>
<servlet-class>com.sap.lcr.cimsrv.CIMOMServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>ChangePasswordServlet</servlet-name>
<servlet-class>com.sap.lcr.security.ChangePasswordServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>cimadminservlet</servlet-name>
<servlet-class>com.sap.lcr.webui.Admin</servlet-class>
</servlet>
<servlet>
<servlet-name>adminservlet</servlet-name>
<servlet-class>com.sap.lcr.webui.Admin</servlet-class>
</servlet>
<servlet>
<servlet-name>grmgservlet</servlet-name>
<servlet-class>com.sap.lcr.grmg.GrmgServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>dsservlet</servlet-name>
<servlet-class>com.sap.lcr.sagent.DataSupplierServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>syncservlet</servlet-name>
<servlet-class>com.sap.sld.contentsync.SyncServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>CIMOMServlet</servlet-name>
<url-pattern>/cimom</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ChangePasswordServlet</servlet-name>
<url-pattern>/ChangePasswordSLD</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>cimadminservlet</servlet-name>
<url-pattern>/Admin</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>adminservlet</servlet-name>
<url-pattern>/admin/Admin</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>grmgservlet</servlet-name>
<url-pattern>/rtc</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>dsservlet</servlet-name>
<url-pattern>/ds</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>syncservlet</servlet-name>
<url-pattern>/sync</url-pattern>
</servlet-mapping>
<welcome-file-list>
<welcome-file>index.html</welcome-file>
</welcome-file-list>
<security-constraint>
<web-resource-collection>
<web-resource-name>General access restriction for readers</web-resource-name>
<url-pattern>/cimom</url-pattern>
<url-pattern>/ChangePasswordSLD</url-pattern>
<url-pattern>/indexold.jsp</url-pattern>
<url-pattern>/sldcheck.jsp</url-pattern>
<url-pattern>/paramhelp.jsp</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>LcrUser</role-name>
<role-name>LcrSupport</role-name>
<role-name>LcrContentSync</role-name>
<role-name>LcrInstanceWriterCR</role-name>
<role-name>LcrInstanceWriterLD</role-name>
<role-name>LcrInstanceWriterNR</role-name>
<role-name>LcrInstanceWriterAll</role-name>
<role-name>LcrClassWriter</role-name>
<role-name>LcrAdministrator</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>Access restriction for administrators and support</web-resource-name>
<url-pattern>/admin/*</url-pattern>
<url-pattern>/admin.jsp</url-pattern>
<url-pattern>/Admin</url-pattern>
<url-pattern>/fun/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>LcrAdministrator</role-name>
<role-name>LcrSupport</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>Access restriction for data suppliers</web-resource-name>
<url-pattern>/ds</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>DataSupplierLD</role-name>
<role-name>LcrInstanceWriterLD</role-name>
<role-name>LcrInstanceWriterAll</role-name>
<role-name>LcrAdministrator</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>Access restriction for content synchronization</web-resource-name>
<url-pattern>/sync</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>LcrContentSync</role-name>
<role-name>LcrAdministrator</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>SLD</realm-name>
</login-config>
<security-role>
<description>Basic role for all users that are granted access to the SLD application.</description>
<role-name>LcrUser</role-name>
</security-role>
<security-role>
<description>Basic role for SAP support. Users in this role have read-only access to all UIs, including the Administration pages.</description>
<role-name>LcrSupport</role-name>
</security-role>
<security-role>
<description>Users in this role are allowed to create and modify CIM classes. (includes role LcrUser but no instance writer roles)</description>
<role-name>LcrClassWriter</role-name>
</security-role>
<security-role>
<description>Users in this role are allowed to create and modify all types of CIM instances. (includes roles LcrUser, LcrInstanceWriterCR, LcrInstanceWriterLD, LcrInstanceWriterNR)</description>
<role-name>LcrInstanceWriterAll</role-name>
</security-role>
<security-role>
<description>Users in this role are allowed to create and modify CIM instances that are part of the LD schema subset. (includes role LcrUser)</description>
<role-name>LcrInstanceWriterLD</role-name>
</security-role>
<security-role>
<description>Users in this role are allowed to create and modify CIM instances that are part of the CR schema subset. (includes role LcrUser)</description>
<role-name>LcrInstanceWriterCR</role-name>
</security-role>
<security-role>
<description>Users in this role are allowed to create and modify CIM instances that are part of the NR schema subset. (includes role LcrUser)</description>
<role-name>LcrInstanceWriterNR</role-name>
</security-role>
<security-role>
<description>Administrators of the SLD server (they have access to admin.jsp). (includes all other roles)</description>
<role-name>LcrAdministrator</role-name>
</security-role>
<security-role>
<description>Users in this role are allowed to supply landscape data to the SLD (one example is the SLD Data Supplier service of the SAP J2EE Engine).</description>
<role-name>DataSupplierLD</role-name>
</security-role>
<security-role>
<description>Allows operation of SLD content synchronization (includes role LcrUser).</description>
<role-name>LcrContentSync</role-name>
</security-role>
<env-entry>
<env-entry-name>Setting</env-entry-name>
<env-entry-type>java.lang.String</env-entry-type>
<env-entry-value>Default</env-entry-value>
</env-entry>
</web-app>
