X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=solution%2Fintegration%2Fsmo%2Foam%2Fsdnr%2Foauth-aaa-app-config.xml;h=c210e3730f6738d7613b350a381d3adf09cc67b9;hb=refs%2Fchanges%2F91%2F9391%2F2;hp=28a79f64b95b8b64e1549d03928718152f0bc6f6;hpb=f55fe3cb7bebf5081cd180bf57f2fc091808173c;p=oam.git

diff --git a/solution/integration/smo/oam/sdnr/oauth-aaa-app-config.xml b/solution/integration/smo/oam/sdnr/oauth-aaa-app-config.xml
index 28a79f6..c210e37 100644
--- a/solution/integration/smo/oam/sdnr/oauth-aaa-app-config.xml
+++ b/solution/integration/smo/oam/sdnr/oauth-aaa-app-config.xml
@@ -40,11 +40,11 @@
     </main>
     <main>
         <pair-key>anyroles</pair-key>
-        <pair-value>org.opendaylight.aaa.shiro.filters.AnyRoleHttpAuthenticationFilter</pair-value>
+        <pair-value>org.onap.ccsdk.features.sdnr.wt.oauthprovider.filters.AnyRoleHttpAuthenticationFilter</pair-value>
     </main>
     <main>
         <pair-key>authcBearer</pair-key>
-        <pair-value>org.opendaylight.aaa.shiro.filters.ODLHttpAuthenticationFilter2</pair-value>
+        <pair-value>org.onap.ccsdk.features.sdnr.wt.oauthprovider.filters.BearerAndBasicHttpAuthenticationFilter</pair-value>
     </main>
 
     <!-- in order to track AAA challenge attempts -->
@@ -72,26 +72,35 @@
         <pair-key>/**/v1/**</pair-key>
         <pair-value>authcBearer, roles[admin]</pair-value>
     </urls>
+    <!-- allow admin only access to write mdsal auth config -->
     <urls>
-        <pair-key>/**/config/aaa*/**</pair-key>
+        <pair-key>/rests/**/aaa*/**</pair-key>
         <pair-value>authcBearer, roles[admin]</pair-value>
     </urls>
-     <urls>
+    <!-- anon access for login api -->
+    <urls>
         <pair-key>/oauth/**</pair-key>
         <pair-value>anon</pair-value>
     </urls>
+    <urls>
+        <pair-key>/ready</pair-key>
+        <pair-value>anon</pair-value>
+    </urls>
+    <!-- anon access for odlux ui -->
     <urls>
         <pair-key>/odlux/**</pair-key>
         <pair-value>anon</pair-value>
     </urls>
+    <!-- admin only access for apidocs -->
     <urls>
         <pair-key>/apidoc/**</pair-key>
-        <pair-value>authcBasic</pair-value>
+        <pair-value>authcBasic, roles[admin]</pair-value>
     </urls>
     <urls>
         <pair-key>/rests/**</pair-key>
         <pair-value>authcBearer, anyroles["admin,provision"]</pair-value>
     </urls>
+    <!-- any other access with configured dynamic filter -->
     <urls>
         <pair-key>/**</pair-key>
         <pair-value>authcBearer, anyroles["admin,provision"]</pair-value>