# HG changeset patch
# User Elliott Baron <ebaron@redhat.com>
# Date 1375378831 14400
# Node ID 74c7131a0bb99eca66ef5b7dcfdd9dcfb6c9d39d
# Parent  dd3c6928c4e61e6f0b25e30894789a9b63ecce1b
Update thermostat-roles.properties template

This commit updates the commented-out template provided in
thermostat-roles.properties to include new roles needed for prepared
statements and command channel actions. The command channel action roles
are grouped under a new recursive role: thermostat-cmdc.

Reviewed-by: jerboaa
Review-thread: http://icedtea.classpath.org/pipermail/thermostat/2013-July/007708.html

diff -r dd3c6928c4e6 -r 74c7131a0bb9 distribution/config/thermostat-roles.properties
--- a/distribution/config/thermostat-roles.properties	Wed Jul 31 15:36:00 2013 +0200
+++ b/distribution/config/thermostat-roles.properties	Thu Aug 01 13:40:31 2013 -0400
@@ -39,4 +39,15 @@
 # "thermostat-client" role.
 #thermostat-client = thermostat-realm, thermostat-login, thermostat-query, \
 #                    thermostat-cmdc-generate, thermostat-load-file, \
-#                    thermostat-get-count, thermostat-register-category
+#                    thermostat-get-count, thermostat-register-category, \
+#                    thermostat-prepare-statement
+#
+# Example recursive role definition that grants all command channel privileges.
+# You may uncomment the following lines and assign your client users this
+# "thermostat-cmdc" role.
+#thermostat-cmdc = thermostat-cmdc-grant-garbage-collect, \
+#                  thermostat-cmdc-grant-dump-heap, \
+#                  thermostat-cmdc-grant-thread-harvester, \
+#                  thermostat-cmdc-grant-killvm, \
+#                  thermostat-cmdc-grant-ping, \
+#                  thermostat-cmdc-grant-jmx-toggle-notifications