Index: ssts-web/src/main/webapp/WEB-INF/spring/applicationContext-acegi-security.xml
===================================================================
diff -u -r27959 -r35940
--- ssts-web/src/main/webapp/WEB-INF/spring/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 27959)
+++ ssts-web/src/main/webapp/WEB-INF/spring/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 35940)
@@ -42,12 +42,26 @@
 			<intercept-url pattern="/logonSSOForGzzyyfy.jsp" access="permitAll"></intercept-url>
 			<intercept-url pattern="/logonSSOForCszxyy.jsp" access="permitAll"></intercept-url>
 			<intercept-url pattern="/logonSSOForSzszyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForSzszyy02.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForNfykdxnfyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForDgszyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForKsdqdyrmyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForFsszyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForGzsdbrmyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForZsyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForHbsxkyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForGdskqyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForFsfy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForSzsdsrmyy.jsp" access="permitAll"></intercept-url>
+			<intercept-url pattern="/logonSSOForSszxyy.jsp" access="permitAll"></intercept-url>
 			<intercept-url pattern="/debug/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/buttjoint/**" access="permitAll"></intercept-url>
+			<intercept-url pattern="/ext-4.2.3/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectsystem/qualitymonitoringWithNoLogon/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectsystem/config/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectsystem/common/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectSystem/fileUploadServlet/**" access="permitAll"></intercept-url>
+			<intercept-url pattern="/disinfectSystem/mediaDownloadServlet/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/CodeImageServlet/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/fckeditor/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/UserUpLoadFiles/**" access="permitAll"></intercept-url>
@@ -58,7 +72,7 @@
 			<intercept-url pattern="/jquery/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/ext/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/ext-4.2.3/**" access="permitAll"></intercept-url>
-			<intercept-url pattern="/dwr/**" access="permitAll"></intercept-url>
+			<!-- <intercept-url pattern="/dwr/**" access="permitAll"></intercept-url> -->
 			<intercept-url pattern="/images/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/styles/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/scripts/**" access="permitAll"></intercept-url>
@@ -68,7 +82,15 @@
 			<intercept-url pattern="/mobileClient/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectSystem/sterilization/sterilizationRecordAction!uploadSterilizationRecordPic.do" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectSystem/printBarcodeAction!printBarcodeImage.do" access="permitAll"></intercept-url>
+			<intercept-url pattern="/disinfectSystem/verification/**" access="permitAll"></intercept-url>
+			<intercept-url pattern="/disinfectsystem/touchScreen/recycle/alertDiv/CJL.0.1.min.js" access="permitAll"></intercept-url>
+			<intercept-url pattern="/disinfectsystem/touchScreen/recycle/alertDiv/AlertBox.js" access="permitAll"></intercept-url>
 			<intercept-url pattern="/servlets/image" access="permitAll"></intercept-url>
+			<intercept-url pattern="/disinfectSystem/washAndDisinfect/washAndDisinfectRecordController/submitWashAndDisinfectRecord.mhtml" access="permitAll"></intercept-url>
+			<intercept-url pattern="/jasperreports/jasperreportsAction!getFirstSupplyRoomConfigOnlineUserDate.do" access="permitAll"></intercept-url>
+			<intercept-url pattern="/jasperreports/jasperreportsAction!getEquipmentData.do" access="permitAll"></intercept-url>
+			<intercept-url pattern="/jasperreports/jasperreportsAction!getRealTimeBulletinBoardWorkloadData.do" access="permitAll"></intercept-url>
+			<intercept-url pattern="/disinfectsystem/operationReservationAction!findTodayOperationReservatonAmount.do" access="permitAll"></intercept-url>
 
 			<!--  user is not an anonymous or a remember-me user -->
 			<intercept-url pattern="/**" access="isFullyAuthenticated()"></intercept-url>