title: How to lockdown grails spring security / cas application?
body: <p>I've tried the standard Config setting  </p>
  
  <pre><code>grails.plugins.springsecurity.rejectIfNoRule = true
  </code></pre>
  
  <p>but this results in a redirect loop. </p>
  
  <p>I've also tried</p>
  
  <pre><code>grails.plugins.springsecurity.interceptUrlMap = [
          '**':    ['IS_AUTHENTICATED_FULLY']
  ]
  </code></pre>
  
  <p>but they simply have no effect. Out of what I've tried so far, only controller annotations are working but I'd really prefer a whitelist approach.</p>