X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Fauth%2FDataAdminLoginModule.java;h=ea1046be9e00c2ed164f03a6fbcbed7d0da8dcf2;hb=e168383bac50637131fef8c41e119db7eb2284a7;hp=50a8788344abc533eebace5cce92239bb7c0428a;hpb=088c1b517a543e935d8ab65c3b2fd2d0269b551d;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/auth/DataAdminLoginModule.java b/org.argeo.cms/src/org/argeo/cms/auth/DataAdminLoginModule.java
index 50a878834..ea1046be9 100644
--- a/org.argeo.cms/src/org/argeo/cms/auth/DataAdminLoginModule.java
+++ b/org.argeo.cms/src/org/argeo/cms/auth/DataAdminLoginModule.java
@@ -2,14 +2,19 @@ package org.argeo.cms.auth;
 
 import java.util.Map;
 
+import javax.security.auth.AuthPermission;
 import javax.security.auth.Subject;
 import javax.security.auth.callback.CallbackHandler;
 import javax.security.auth.login.LoginException;
 import javax.security.auth.spi.LoginModule;
 
-import org.argeo.node.security.DataAdminPrincipal;
+import org.argeo.api.cms.DataAdminPrincipal;
 
-/** Logs a system process as data admin */
+/**
+ * Log-in a system process as data admin. Protection is via
+ * {@link AuthPermission} on this login module, so if it can be accessed it will
+ * always succeed.
+ */
 public class DataAdminLoginModule implements LoginModule {
 	private Subject subject;
 
@@ -21,7 +26,6 @@ public class DataAdminLoginModule implements LoginModule {
 
 	@Override
 	public boolean login() throws LoginException {
-		// TODO check permission?
 		return true;
 	}