Sample oeablSecurityJWT.csv file

############## Intercept-url definitions for the REST transport URIs ###############
"/rest/**","*","#oauth2.hasAnyScope('PSCUser')"

############## Intercept-url definitions for the WEB transport  URIs ###############
"/web/ic4b/request/processRequest.r**","GET","permitAll()"
"/web/Login/**","*","permitAll()"
"/web/SmartMessage/**","GET","permitAll()"
"/web/**","*","#oauth2.hasAnyScope('PSCUser')"

############## Intercept-url definitions for the default URI space #################
"/static/home.html","GET","#oauth2.hasScope('PSCUser')"

"/static/ServerStatus.html","GET","#oauth2.hasAnyScope('PSCUser','PSCAdmin','PSCDebug')"

"/server/**","GET","#oauth2.hasAnyScope('PSCAdmin','PSCDebug')"

"/*","GET","permitAll()"

"/static/*","GET","permitAll()" 

"/static/error/*","GET","permitAll()"

"/static/images/*","GET","permitAll()" 

"/static/auth/*","GET","permitAll()" 

"/static/**","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.htm*","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.gif","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.jpg","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.css","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.js","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.json","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.asp","GET","#oauth2.hasAnyScope('PSCUser')"

"/**/*.inc","GET","#oauth2.hasAnyScope('PSCUser')"

# Best practice - deny anything not explicitly granted
"/**","*","denyAll()"