title: grails2, springsecurity and static resources (css, js, etc.)
body: <p>Happy New Year!
  To start the year on the right foot, I'm trying to bolt down my app with the help of springsecurity plugin. </p>
  
  <p>Came across the Pessimistic Lockdown section of the plugin docs and the following indeed locked everything down:</p>
  
  <pre><code>grails.plugins.springsecurity.rejectIfNoRule = true
  </code></pre>
  
  <p>... but how do I 'unlock' css, js and image files? I'm able to unlock all the controllers and actions that I need to be publicly accessible, but not the css files.</p>
  
  <p>At the moment my Config.groovy has this:</p>
  
  <pre><code>grails.plugins.springsecurity.rejectIfNoRule = true;
  
  grails.plugins.springsecurity.securityConfigType = SecurityConfigType.InterceptUrlMap
  
  grails.plugins.springsecurity.interceptUrlMap = [
  
          '/admin/**' : ['ROLE_ADMIN', 'IS_AUTHENTICATED_FULLY'],
          '/css/**': ['IS_AUTHENTICATED_ANONYMOUSLY'],
          '/login/auth': ['IS_AUTHENTICATED_ANONYMOUSLY'],
          '/*':               ['IS_AUTHENTICATED_ANONYMOUSLY']
  ]
  </code></pre>
  
  <p>the '/*' keeps the home page visible, but the css is blocked.
  Thanks in advance</p>