commit 1ae6fe6b0b4006a86098f7cd61495c4b80a5c67b
author mgeiss <mgeiss@mifos.org> Wed Aug 09 11:19:53 2017 +0200
committer mgeiss <mgeiss@mifos.org> Wed Aug 09 11:19:53 2017 +0200
tree 08cd367739ac3626684cd683327a8a6cc3fe7cd3
parent f6b84f2e7560331d8c8e8680f7a44e8f5db88869

retrofitted the creation of internal token permissions (self)

component-test/src/main/java/TestAuthentication.java

diff --git a/component-test/src/main/java/TestAuthentication.java b/component-test/src/main/java/TestAuthentication.java
index 8e98443..d134b78 100644
--- a/component-test/src/main/java/TestAuthentication.java
+++ b/component-test/src/main/java/TestAuthentication.java
@@ -142,8 +142,9 @@
       Collections.addAll(expectedTokenPermissions,
               new TokenPermission(horusEndpoint.getPath(), Collections.singleton(AllowedOperation.READ)),
               new TokenPermission(maatEndpoint.getPath(), Collections.singleton(AllowedOperation.READ)),
-              new TokenPermission("identity-v1/users/{useridentifier}/password", Collections.singleton(AllowedOperation.CHANGE)),
-              new TokenPermission("identity-v1/users/{useridentifier}/permissions", Collections.singleton(AllowedOperation.READ)),
+              new TokenPermission("identity-v1/users/{useridentifier}/password",
+                  Sets.newHashSet(AllowedOperation.READ, AllowedOperation.CHANGE, AllowedOperation.DELETE)),
+              new TokenPermission("identity-v1/users/{useridentifier}/permissions", Sets.newHashSet(AllowedOperation.READ)),
               new TokenPermission("identity-v1/token/_current", Collections.singleton(AllowedOperation.DELETE)));
 
       Assert.assertTrue("Expected: " + expectedTokenPermissions + "\nActual: " + tokenPermissions,

service/src/main/java/io/mifos/identity/internal/command/handler/AuthenticationCommandHandler.java

diff --git a/service/src/main/java/io/mifos/identity/internal/command/handler/AuthenticationCommandHandler.java b/service/src/main/java/io/mifos/identity/internal/command/handler/AuthenticationCommandHandler.java
index d6a6589..af81819 100644
--- a/service/src/main/java/io/mifos/identity/internal/command/handler/AuthenticationCommandHandler.java
+++ b/service/src/main/java/io/mifos/identity/internal/command/handler/AuthenticationCommandHandler.java
@@ -15,6 +15,7 @@
  */
 package io.mifos.identity.internal.command.handler;
 
+import com.google.common.collect.Sets;
 import com.google.gson.Gson;
 import io.mifos.anubis.api.v1.domain.AllowedOperation;
 import io.mifos.anubis.api.v1.domain.TokenContent;
@@ -489,10 +490,10 @@
 
     ret.add(new TokenPermission(
             applicationName + "/applications/*/permissions/*/users/{useridentifier}/enabled",
-            AllowedOperation.ALL));
+            Sets.newHashSet(AllowedOperation.READ, AllowedOperation.CHANGE, AllowedOperation.DELETE)));
     ret.add(new TokenPermission(
             applicationName + "/users/{useridentifier}/permissions",
-            Collections.singleton(AllowedOperation.READ)));
+            Sets.newHashSet(AllowedOperation.READ)));
 
     return ret;
   }
@@ -502,10 +503,10 @@
 
     ret.add(new TokenPermission(
             applicationName + "/users/{useridentifier}/password",
-            Collections.singleton(AllowedOperation.CHANGE)));
+            Sets.newHashSet(AllowedOperation.READ, AllowedOperation.CHANGE, AllowedOperation.DELETE)));
     ret.add(new TokenPermission(
             applicationName + "/token/_current",
-            Collections.singleton(AllowedOperation.DELETE)));
+            Sets.newHashSet(AllowedOperation.DELETE)));
 
     return ret;
   }