Spring Security IP Restrictions in Grails

Spring security provides  various methods to ensure that users are getting access to only those parts of application for which they are authorized. one such feature is IP address restriction, which allows mapping URIs to certain IP address(es) so that these URIS are only accessible from these IP address.  These restrictions can be specified in config as –
[java]
grails.plugins.springsecurity.ipRestrictions = [
‘/admin/**’: ‘192.168.1.0/24’, //allow access to admin pages only from LAN
]
[/java]

also, these restriction mappings can be changed at run time by using the “ipAddressFilter” bean. for example –
[java]
def ipAddressFilter //bean injected to change restriction mappings dynamically.

//change restrction mappings, note that it will overwrite all previous mappings with one defined here.
def allowAdminAccess() {
Map ipRestrictionMap= [‘/admin/**’: request.getRemoteAddr()]
ipAddressFilter.setIpRestrictions(ipRestrictionMap);
}
[/java]
one can also obtain the current set of restrictions applied on a specific URI as follows –
[java]
Map restrictionsForAdminPages=ipAddressFilter.findMatchingRules("/admin/**")
[/java]