<security:http>        <security:http-basic></security:http-basic>                <security:intercept-url pattern="/**" access="ROLE_USER"/>    </security:http>    <!--使用AuthenticationManager 进行认证相关配置-->    <!--authentication-manager元素指定了一个AuthenticationManager，其需要一个AuthenticationProvider（对应authentication-provider元素）来进行真正的认证-->    <security:authentication-manager>        <security:authentication-provider>            <security:user-service>                <security:user name="user" password="user" authorities="ROLE_USER"/>                <security:user name="admin" password="admin" authorities="ROLE_USER, ROLE_ADMIN"/>            </security:user-service>        </security:authentication-provider>    </security:authentication-manager>