<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC  "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">
<beans>

    <bean id="clusterHttpInvokerParent" abstract="true" class="com.l7tech.gateway.common.spring.remoting.http.SecureHttpInvokerServiceExporter">
        <property name="remoteInvocationExecutor">
            <bean class="com.l7tech.gateway.common.spring.remoting.http.SecureRemoteInvocationExecutor">
                <constructor-arg index="0" value="CLUSTER"/>
                <constructor-arg index="1"><null/></constructor-arg>
                <constructor-arg index="2" ref="remotingProvider"/>
            </bean>
        </property>
    </bean>

    <bean name="/LogAccessAdmin" parent="clusterHttpInvokerParent">
        <property name="service" ref="clusterLogAccessAdmin"/>
        <property name="serviceInterface" value="com.l7tech.gateway.common.log.LogAccessAdmin"/>
        <!--
            WARNING:
            You must ensure that permitted classes ARE NOT from untrusted sources and they CANNOT be used to execute
            arbitrary Java code e.g. java.lang.System and java.lang.Runtime MUST NOT be permitted.
            In addition Apache InvokerTransformer is known to have remote code execution vulnerability, and MUST NOT be permitted.
        -->
        <property name="permittedClassNames">
            <set>
                <value>[Ljava.lang.Class;</value>
                <value>[Ljava.lang.Object;</value>
                <value>int</value>
                <value>long</value>
                <value>java.lang.Boolean</value>
                <value>java.lang.Class</value>
                <value>java.lang.Integer</value>
                <value>java.lang.Long</value>
                <value>java.lang.Number</value>
                <value>java.lang.Object</value>
                <value>java.lang.String</value>
                <value>org.springframework.remoting.support.RemoteInvocation</value>
                <value>com.l7tech.gateway.common.log.LogSinkQuery</value>
                <value>com.l7tech.objectmodel.Goid</value>
                <value>com.l7tech.objectmodel.FindException</value>
            </set>
        </property>
    </bean>

</beans>
