Rename node roles

[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / KernelHeader.java

diff --git a/org.argeo.cms/src/org/argeo/cms/KernelHeader.java b/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
index 620699abfac7a944cf08ab8f81ad83974bdfd0ac..649fc9c0450607947972c821c55180b69e84bc70 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
+++ b/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
@@ -9,13 +9,15 @@ public interface KernelHeader {
        final static String LOGIN_CONTEXT_SINGLE_USER = "SINGLE_USER";
 
        // RESERVED ROLES
-       public final static String ROLE_ADMIN = "cn=admin,ou=system,ou=node";
-       public final static String ROLE_GROUP_ADMIN = "cn=groupAdmin,ou=system,ou=node";
-       public final static String ROLE_USER_ADMIN = "cn=userAdmin,ou=system,ou=node";
+       final static String ROLES_BASEDN = "ou=roles,ou=node";
+       public final static String ROLE_ADMIN = "cn=admin," + ROLES_BASEDN;
+       public final static String ROLE_GROUP_ADMIN = "cn=groupAdmin,"
+                       + ROLES_BASEDN;
+       public final static String ROLE_USER_ADMIN = "cn=userAdmin," + ROLES_BASEDN;
        // Special system groups that cannot be edited:
        // user U anonymous = everyone
-       public final static String ROLE_USER = "cn=user,ou=system,ou=node";
-       public final static String ROLE_ANONYMOUS = "cn=anonymous,ou=system,ou=node";
+       public final static String ROLE_USER = "cn=user," + ROLES_BASEDN;
+       public final static String ROLE_ANONYMOUS = "cn=anonymous," + ROLES_BASEDN;
 
        // RESERVED USERNAMES
        public final static String USERNAME_ADMIN = "root";