note why it is how it is

git-svn-id: https://svn.apache.org/repos/asf/maven/archiva/trunk@485532 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/archiva-security/src/main/java/org/apache/maven/archiva/security/ArchivaSystemAdministratorRoleProfile.java b/archiva-security/src/main/java/org/apache/maven/archiva/security/ArchivaSystemAdministratorRoleProfile.java
index facb4dfade6f1190cacebdfcf6ba1a250662bc1e..6470f26d3cd6c8f78c31bf60bb47d54fc2d50a05 100644 (file)
--- a/archiva-security/src/main/java/org/apache/maven/archiva/security/ArchivaSystemAdministratorRoleProfile.java
+++ b/archiva-security/src/main/java/org/apache/maven/archiva/security/ArchivaSystemAdministratorRoleProfile.java
@@ -45,6 +45,8 @@ public class ArchivaSystemAdministratorRoleProfile
         operations.add( ArchivaRoleConstants.OPERATION_ADD_REPOSITORY );
         operations.add( ArchivaRoleConstants.OPERATION_EDIT_REPOSITORY );
         operations.add( ArchivaRoleConstants.OPERATION_DELETE_REPOSITORY );
+        // we don't add access/upload repository operations. This isn't a sys-admin function, and we don't want to
+        // encourage the use of the sys admin role for such operations. They can grant it as necessary.
         return operations;
     }