<?xml version="1.0" encoding="UTF-8"?>
<web-app id="UDDI_Web" version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
    <servlet>
	<servlet-name>UDDI</servlet-name>
	<servlet-class>com.sap.uddi.server.application.HttpConnector</servlet-class>
	<init-param>
		<param-name>uddi-server.rcf</param-name>
		<param-value>conf/replicationConfigurationV3.xml</param-value>
	</init-param>
	<load-on-startup>1</load-on-startup>
    </servlet>
      
    <servlet>
	<servlet-name>UddiStatus</servlet-name>
	<servlet-class>com.sap.uddi.server.application.status.UddiStatus</servlet-class>
	<load-on-startup>1</load-on-startup>
    </servlet>
      
    <servlet-mapping>
	<servlet-name>UDDI</servlet-name>
	<url-pattern>/*</url-pattern>
    </servlet-mapping> 
  
    <servlet-mapping>
	<servlet-name>UddiStatus</servlet-name>
	<url-pattern>/status</url-pattern>
    </servlet-mapping>
  
    <security-constraint>
      <web-resource-collection>
        <web-resource-name>SecurityRestriction</web-resource-name>
        <description>Protect the Uddi servlet.</description>
        <url-pattern>/*</url-pattern>
        <http-method>GET</http-method>
        <http-method>POST</http-method>
      </web-resource-collection>
      <auth-constraint>
        <description>Authorized Users Group</description>
        <role-name>Everyone</role-name>
      </auth-constraint>
      <user-data-constraint>
        <transport-guarantee>NONE</transport-guarantee>
      </user-data-constraint>
    </security-constraint>
  
    <security-constraint>
       <web-resource-collection>
         <web-resource-name>SecurityRestriction</web-resource-name>
         <description>Do not require auth for uddi wsdl</description>
         <url-pattern>/wsdl/*</url-pattern>
         <http-method>GET</http-method>
         <http-method>POST</http-method>
       </web-resource-collection>
    </security-constraint>
    
    <security-constraint>
       <web-resource-collection>
           <web-resource-name>SecurityRestriction</web-resource-name>
           <description>Do not require basic auth for replication</description>
           <url-pattern>/api/replication</url-pattern>
           <http-method>GET</http-method>
           <http-method>POST</http-method>
       </web-resource-collection>
    </security-constraint>
  
    <login-config>
      <auth-method>BASIC</auth-method>
    </login-config>
  
    <security-role>
      <description>Every user registered in WebAs</description>
      <role-name>Everyone</role-name>
    </security-role>	
    <security-role>
    	<description>UDDI Publisher with level 1 tier limits</description>
	<role-name>UDDI_Tier1</role-name>
    </security-role>
    <security-role>
	<description>UDDI Publisher with level N tier limits</description>
	<role-name>UDDI_TierN</role-name>
    </security-role>
    <security-role>
	<description>UDDI User with Admin level privileges</description>
	<role-name>UDDI_Admin</role-name>
    </security-role>
	
    <resource-ref>
	<res-ref-name>SAP/BC_UDDIV3</res-ref-name>
	<res-type>javax.sql.DataSource</res-type>
	<res-auth>Container</res-auth>
	<res-sharing-scope>Unshareable</res-sharing-scope>
    </resource-ref>
</web-app>
