Session authentication working

[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / KernelHeader.java

diff --git a/org.argeo.cms/src/org/argeo/cms/KernelHeader.java b/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
index 94477c3d460869c968e2de04fa8863f3b6d70d19..2e4049192790da63e0bf06fe1e9d7acc4b5fa768 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
+++ b/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
@@ -2,20 +2,32 @@ package org.argeo.cms;
 
 /** Public properties of the CMS Kernel */
 public interface KernelHeader {
+       final static String SECURITY_PROVIDER = "BC";// Bouncy Castle
+
        // LOGIN CONTEXTS
        final static String LOGIN_CONTEXT_USER = "USER";
        final static String LOGIN_CONTEXT_ANONYMOUS = "ANONYMOUS";
        final static String LOGIN_CONTEXT_SYSTEM = "SYSTEM";
+       final static String LOGIN_CONTEXT_SINGLE_USER = "SINGLE_USER";
+
+       // HTTP
+       final static String ACCESS_CONTROL_CONTEXT = "org.argeo.node.accessControlContext";
 
        // RESERVED ROLES
-       public final static String ROLE_ADMIN = "ROLE_ADMIN";
-       public final static String ROLE_GROUP_ADMIN = "ROLE_GROUP_ADMIN";
-       public final static String ROLE_USER_ADMIN = "ROLE_USER_ADMIN";
-       public final static String ROLE_USER = "ROLE_USER";
-       public final static String ROLE_ANONYMOUS = "ROLE_ANONYMOUS";
+       public final static String ROLE_KERNEL = "OU=node";
+       public final static String ROLES_BASEDN = "ou=roles,ou=node";
+       public final static String ROLE_ADMIN = "cn=admin," + ROLES_BASEDN;
+       public final static String ROLE_GROUP_ADMIN = "cn=groupAdmin,"
+                       + ROLES_BASEDN;
+       public final static String ROLE_USER_ADMIN = "cn=userAdmin," + ROLES_BASEDN;
+       // Special system groups that cannot be edited:
+       // user U anonymous = everyone
+       public final static String ROLE_USER = "cn=user," + ROLES_BASEDN;
+       public final static String ROLE_ANONYMOUS = "cn=anonymous," + ROLES_BASEDN;
 
        // RESERVED USERNAMES
        public final static String USERNAME_ADMIN = "root";
        public final static String USERNAME_DEMO = "demo";
+       @Deprecated
        public final static String USERNAME_ANONYMOUS = "anonymous";
 }