Update AAA shiro configuration for CAS AAF

Update configuration file based on AAF bootstrap data in the AAF role.dat file.

Change-Id: Iafbb1f37383fb97a00441539e14ace8e9282a330
Issue-ID: OOM-1488
Signed-off-by: Aaron Hay <aaron.hay@att.com>

diff --git a/kubernetes/appc/resources/config/appc/opt/onap/appc/data/properties/aaa-app-config.xml b/kubernetes/appc/resources/config/appc/opt/onap/appc/data/properties/aaa-app-config.xml
index 3dd78d3..81834ea 100644 (file)
--- a/kubernetes/appc/resources/config/appc/opt/onap/appc/data/properties/aaa-app-config.xml
+++ b/kubernetes/appc/resources/config/appc/opt/onap/appc/data/properties/aaa-app-config.xml
@@ -80,37 +80,37 @@
     <urls>
         <pair-key>/auth/**</pair-key>
 <!--        <pair-value>authcBasic, roles[admin], dynamicAuthorization</pair-value> -->
-        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-admin|*]</pair-value>
+        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>
     </urls>
     <urls>
         <pair-key>/restconf/config/aaa-cert-mdsal**</pair-key>
 <!--        <pair-value>authcBasic, roles[admin]</pair-value> -->
-        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-admin|*]</pair-value>
+        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>
     </urls>
     <urls>
         <pair-key>/restconf/operational/aaa-cert-mdsal**</pair-key>
 <!--        <pair-value>authcBasic, roles[admin]</pair-value> -->
-        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-admin|*]</pair-value>
+        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>
     </urls>
     <urls>
         <pair-key>/restconf/operations/aaa-cert-rpc**</pair-key>
 <!--        <pair-value>authcBasic, roles[admin]</pair-value> -->
-        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-admin|*]</pair-value>
+        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>
     </urls>
     <urls>
         <pair-key>/restconf/config/aaa-authn-model**</pair-key>
 <!--        <pair-value>authcBasic, roles[admin]</pair-value> -->
-        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-admin|*]</pair-value>
+        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>
     </urls>
     <urls>
         <pair-key>/restconf/operational/aaa-authn-model**</pair-key>
 <!--        <pair-value>authcBasic, roles[admin]</pair-value> -->
-        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-admin|*]</pair-value>
+        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>
     </urls>
     <urls>
         <pair-key>/restconf/operations/cluster-admin**</pair-key>
 <!--        <pair-value>authcBasic, roles[admin]</pair-value> -->
-        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-admin|*]</pair-value>
+        <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>
     </urls>
     <urls>
         <pair-key>/**</pair-key>