X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2FKernelHeader.java;h=649fc9c0450607947972c821c55180b69e84bc70;hb=f7944a8accf7b9cfc3cffe6e6f5c611cd48f592c;hp=c2dd2cae7dfe76cc57a107a5ecc46545846beb7b;hpb=998f2785e9571572c21117da28fbd1d681cc33a4;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/KernelHeader.java b/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
index c2dd2cae7..649fc9c04 100644
--- a/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
+++ b/org.argeo.cms/src/org/argeo/cms/KernelHeader.java
@@ -9,14 +9,19 @@ public interface KernelHeader {
 	final static String LOGIN_CONTEXT_SINGLE_USER = "SINGLE_USER";
 
 	// RESERVED ROLES
-	public final static String ROLE_ADMIN = "ROLE_ADMIN";
-	public final static String ROLE_GROUP_ADMIN = "ROLE_GROUP_ADMIN";
-	public final static String ROLE_USER_ADMIN = "ROLE_USER_ADMIN";
-	public final static String ROLE_USER = "ROLE_USER";
-	public final static String ROLE_ANONYMOUS = "ROLE_ANONYMOUS";
+	final static String ROLES_BASEDN = "ou=roles,ou=node";
+	public final static String ROLE_ADMIN = "cn=admin," + ROLES_BASEDN;
+	public final static String ROLE_GROUP_ADMIN = "cn=groupAdmin,"
+			+ ROLES_BASEDN;
+	public final static String ROLE_USER_ADMIN = "cn=userAdmin," + ROLES_BASEDN;
+	// Special system groups that cannot be edited:
+	// user U anonymous = everyone
+	public final static String ROLE_USER = "cn=user," + ROLES_BASEDN;
+	public final static String ROLE_ANONYMOUS = "cn=anonymous," + ROLES_BASEDN;
 
 	// RESERVED USERNAMES
 	public final static String USERNAME_ADMIN = "root";
 	public final static String USERNAME_DEMO = "demo";
+	@Deprecated
 	public final static String USERNAME_ANONYMOUS = "anonymous";
 }