security {

	// see DefaultSecurityConfig.groovy for all settable/overridable properties

	active = true

	loginUserDomainClass = "User"
	authorityDomainClass = "Role"
	requestMapClass = "RequestMap"

	useRequestMapDomainClass = false

	requestMapString = """
		CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
		PATTERN_TYPE_APACHE_ANT
		/user/create=ROLE_ADMIN
		/user/edit=ROLE_ADMIN
		/user/save=ROLE_ADMIN
		/user/list=ROLE_ADMIN, ROLE_USER
	"""
}

Final SecurityConfig.groovy

groovy

Groovy