implement OAuth2 authentication & integration for SecHub server #3559 (…

…#3603) * implement OAuth2 authentication & integration for SecHub server #3559 * merge develop into branch * pr fixes * pr fixes
mercedes-benz · Nov 13, 2024 · e5a324a · e5a324a
1 parent f188a19
commit e5a324a
Show file tree

Hide file tree

Showing 163 changed files with 1,188 additions and 369 deletions.
diff --git a/build.gradle b/build.gradle
@@ -113,6 +113,16 @@ allprojects {
     task prepareGitPush(dependsOn: spotlessApply){
 
     }
+
+    /*
+     * Adds the -parameters compiler argument to every Gradle 'JavaCompile' task
+     * This instructs the Java compiler to include method parameter names in the compiled .class files
+     * This is required for the reflection based frameworks or libraries to work properly (e.g. Spring)
+     */
+    tasks.withType(JavaCompile).configureEach {
+        options.compilerArgs << "-parameters"
+    }
+
 }
 
 

diff --git a/gradle/projects.gradle b/gradle/projects.gradle
@@ -41,7 +41,7 @@ projectType = [
                     project(':sechub-integrationtest'),
                     project(':sechub-developertools'),
                     project(':sechub-test'),
-
+                    project(':sechub-testframework-spring'),
                     project(':sechub-storage-sharedvolume-spring'),
 
                     /* next projects added as spring boot projects only, because otherwise we get the (older)

diff --git a/...c/main/java/com/mercedesbenz/sechub/domain/administration/AdministrationAPIConstants.java b/...c/main/java/com/mercedesbenz/sechub/domain/administration/AdministrationAPIConstants.java
@@ -1,7 +1,8 @@
 // SPDX-License-Identifier: MIT
 package com.mercedesbenz.sechub.domain.administration;
 
-import static com.mercedesbenz.sechub.sharedkernel.APIConstants.*;
+import static com.mercedesbenz.sechub.sharedkernel.security.APIConstants.API_ADMINISTRATION;
+import static com.mercedesbenz.sechub.sharedkernel.security.APIConstants.API_ANONYMOUS;
 
 public class AdministrationAPIConstants {
 

diff --git a/...sechub/domain/administration/autocleanup/IntegrationTestAdministrationRestController.java b/...sechub/domain/administration/autocleanup/IntegrationTestAdministrationRestController.java
@@ -9,8 +9,8 @@
 import org.springframework.web.bind.annotation.RestController;
 
 import com.mercedesbenz.sechub.domain.administration.config.AdministrationConfigService;
-import com.mercedesbenz.sechub.sharedkernel.APIConstants;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
+import com.mercedesbenz.sechub.sharedkernel.security.APIConstants;
 
 /**
  * Contains additional rest call functionality for integration tests on

diff --git a/.../mercedesbenz/sechub/domain/administration/config/ConfigAdministrationRestController.java b/.../mercedesbenz/sechub/domain/administration/config/ConfigAdministrationRestController.java
@@ -15,8 +15,8 @@
 import com.mercedesbenz.sechub.domain.administration.AdministrationAPIConstants;
 import com.mercedesbenz.sechub.domain.administration.autocleanup.AdministrationAutoCleanupConfig;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.config.UseCaseAdminFetchesAutoCleanupConfiguration;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.config.UseCaseAdminUpdatesAutoCleanupConfiguration;
 

diff --git a/...benz/sechub/domain/administration/encryption/AdministrationEncryptionRotationService.java b/...benz/sechub/domain/administration/encryption/AdministrationEncryptionRotationService.java
@@ -5,7 +5,6 @@
 import org.springframework.stereotype.Service;
 
 import com.mercedesbenz.sechub.sharedkernel.Step;
-import com.mercedesbenz.sechub.sharedkernel.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.encryption.SecHubEncryptionData;
 import com.mercedesbenz.sechub.sharedkernel.encryption.SecHubEncryptionDataValidator;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
@@ -14,6 +13,7 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.IsSendingAsyncMessage;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageDataKeys;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
+import com.mercedesbenz.sechub.sharedkernel.security.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.usecases.encryption.UseCaseAdminStartsEncryptionRotation;
 
 @Service

diff --git a/...sbenz/sechub/domain/administration/encryption/EncryptionAdministrationRestController.java b/...sbenz/sechub/domain/administration/encryption/EncryptionAdministrationRestController.java
@@ -14,11 +14,11 @@
 
 import com.mercedesbenz.sechub.domain.administration.AdministrationAPIConstants;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.encryption.SecHubEncryptionData;
 import com.mercedesbenz.sechub.sharedkernel.encryption.SecHubEncryptionDataValidator;
 import com.mercedesbenz.sechub.sharedkernel.encryption.SecHubEncryptionStatus;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.encryption.UseCaseAdminFetchesEncryptionStatus;
 import com.mercedesbenz.sechub.sharedkernel.usecases.encryption.UseCaseAdminStartsEncryptionRotation;
 

diff --git a/...va/com/mercedesbenz/sechub/domain/administration/job/JobAdministrationRestController.java b/...va/com/mercedesbenz/sechub/domain/administration/job/JobAdministrationRestController.java
@@ -17,8 +17,8 @@
 
 import com.mercedesbenz.sechub.domain.administration.AdministrationAPIConstants;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.job.UseCaseAdminCancelsJob;
 import com.mercedesbenz.sechub.sharedkernel.usecases.job.UseCaseAdminListsAllRunningJobs;
 import com.mercedesbenz.sechub.sharedkernel.usecases.job.UseCaseAdminRestartsJob;

diff --git a/...ercedesbenz/sechub/domain/administration/mapping/MappingAdministrationRestController.java b/...ercedesbenz/sechub/domain/administration/mapping/MappingAdministrationRestController.java
@@ -16,8 +16,8 @@
 import com.mercedesbenz.sechub.commons.mapping.MappingData;
 import com.mercedesbenz.sechub.domain.administration.AdministrationAPIConstants;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.config.UseCaseAdmiUpdatesMappingConfiguration;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.config.UseCaseAdminFetchesMappingConfiguration;
 

diff --git a/.../main/java/com/mercedesbenz/sechub/domain/administration/project/ListProjectsService.java b/.../main/java/com/mercedesbenz/sechub/domain/administration/project/ListProjectsService.java
@@ -7,7 +7,7 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 
 import jakarta.annotation.security.RolesAllowed;
 

diff --git a/...ercedesbenz/sechub/domain/administration/project/ProjectAdministrationRestController.java b/...ercedesbenz/sechub/domain/administration/project/ProjectAdministrationRestController.java
@@ -25,9 +25,9 @@
 import com.mercedesbenz.sechub.domain.administration.project.ProjectJsonInput.ProjectMetaData;
 import com.mercedesbenz.sechub.domain.administration.project.ProjectJsonInput.ProjectWhiteList;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.project.ProjectAccessLevel;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminChangesProjectAccessLevel;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminChangesProjectDescription;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminCreatesProject;

diff --git a/.../java/com/mercedesbenz/sechub/domain/administration/project/ProjectAssignUserService.java b/.../java/com/mercedesbenz/sechub/domain/administration/project/ProjectAssignUserService.java
@@ -10,9 +10,7 @@
 
 import com.mercedesbenz.sechub.domain.administration.user.User;
 import com.mercedesbenz.sechub.domain.administration.user.UserRepository;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
-import com.mercedesbenz.sechub.sharedkernel.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.error.AlreadyExistsException;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessage;
@@ -22,6 +20,8 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageDataKeys;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
 import com.mercedesbenz.sechub.sharedkernel.messaging.UserMessage;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
+import com.mercedesbenz.sechub.sharedkernel.security.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.user.UseCaseAdminAssignsUserToProject;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/...om/mercedesbenz/sechub/domain/administration/project/ProjectChangeAccessLevelService.java b/...om/mercedesbenz/sechub/domain/administration/project/ProjectChangeAccessLevelService.java
@@ -8,7 +8,6 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
@@ -19,6 +18,7 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
 import com.mercedesbenz.sechub.sharedkernel.messaging.ProjectMessage;
 import com.mercedesbenz.sechub.sharedkernel.project.ProjectAccessLevel;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminChangesProjectAccessLevel;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/...java/com/mercedesbenz/sechub/domain/administration/project/ProjectChangeOwnerService.java b/...java/com/mercedesbenz/sechub/domain/administration/project/ProjectChangeOwnerService.java
@@ -8,9 +8,7 @@
 
 import com.mercedesbenz.sechub.domain.administration.user.User;
 import com.mercedesbenz.sechub.domain.administration.user.UserRepository;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
-import com.mercedesbenz.sechub.sharedkernel.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.error.AlreadyExistsException;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessage;
@@ -20,6 +18,8 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageDataKeys;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
 import com.mercedesbenz.sechub.sharedkernel.messaging.ProjectMessage;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
+import com.mercedesbenz.sechub.sharedkernel.security.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.user.UseCaseAdminChangesProjectOwner;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/...in/java/com/mercedesbenz/sechub/domain/administration/project/ProjectCreationService.java b/...in/java/com/mercedesbenz/sechub/domain/administration/project/ProjectCreationService.java
@@ -15,9 +15,7 @@
 import com.mercedesbenz.sechub.domain.administration.project.ProjectJsonInput.ProjectMetaData;
 import com.mercedesbenz.sechub.domain.administration.user.User;
 import com.mercedesbenz.sechub.domain.administration.user.UserRepository;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
-import com.mercedesbenz.sechub.sharedkernel.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.error.AlreadyExistsException;
 import com.mercedesbenz.sechub.sharedkernel.error.NotFoundException;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessage;
@@ -27,6 +25,8 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageDataKeys;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
 import com.mercedesbenz.sechub.sharedkernel.messaging.ProjectMessage;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
+import com.mercedesbenz.sechub.sharedkernel.security.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminCreatesProject;
 import com.mercedesbenz.sechub.sharedkernel.validation.URIValidation;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;

diff --git a/...main/java/com/mercedesbenz/sechub/domain/administration/project/ProjectDeleteService.java b/...main/java/com/mercedesbenz/sechub/domain/administration/project/ProjectDeleteService.java
@@ -7,10 +7,8 @@
 import org.springframework.stereotype.Service;
 
 import com.mercedesbenz.sechub.domain.administration.user.User;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.SecHubEnvironment;
 import com.mercedesbenz.sechub.sharedkernel.Step;
-import com.mercedesbenz.sechub.sharedkernel.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessage;
@@ -20,6 +18,8 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageDataKeys;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
 import com.mercedesbenz.sechub.sharedkernel.messaging.ProjectMessage;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
+import com.mercedesbenz.sechub.sharedkernel.security.UserContextService;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminDeleteProject;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/...ava/com/mercedesbenz/sechub/domain/administration/project/ProjectDetailChangeService.java b/...ava/com/mercedesbenz/sechub/domain/administration/project/ProjectDetailChangeService.java
@@ -6,10 +6,10 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.error.NotAcceptableException;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminChangesProjectDescription;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/...om/mercedesbenz/sechub/domain/administration/project/ProjectDetailInformationService.java b/...om/mercedesbenz/sechub/domain/administration/project/ProjectDetailInformationService.java
@@ -6,9 +6,9 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseAdminShowsProjectDetails;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/...ava/com/mercedesbenz/sechub/domain/administration/project/ProjectUnassignUserService.java b/...ava/com/mercedesbenz/sechub/domain/administration/project/ProjectUnassignUserService.java
@@ -8,7 +8,6 @@
 
 import com.mercedesbenz.sechub.domain.administration.user.User;
 import com.mercedesbenz.sechub.domain.administration.user.UserRepository;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.error.AlreadyExistsException;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
@@ -20,6 +19,7 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageDataKeys;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
 import com.mercedesbenz.sechub.sharedkernel.messaging.UserMessage;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.user.UseCaseAdminUnassignsUserFromProject;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/...sbenz/sechub/domain/administration/project/ProjectUpdateAdministrationRestController.java b/...sbenz/sechub/domain/administration/project/ProjectUpdateAdministrationRestController.java
@@ -23,8 +23,8 @@
 import com.mercedesbenz.sechub.domain.administration.project.ProjectJsonInput.ProjectMetaData;
 import com.mercedesbenz.sechub.domain.administration.project.ProjectJsonInput.ProjectWhiteList;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseUpdateProjectMetaData;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseUpdateProjectWhitelist;
 

diff --git a/...mercedesbenz/sechub/domain/administration/project/ProjectUpdateMetaDataEntityService.java b/...mercedesbenz/sechub/domain/administration/project/ProjectUpdateMetaDataEntityService.java
@@ -9,11 +9,11 @@
 import org.springframework.stereotype.Service;
 
 import com.mercedesbenz.sechub.domain.administration.project.ProjectJsonInput.ProjectMetaData;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.error.NotFoundException;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseUpdateProjectMetaData;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/.../com/mercedesbenz/sechub/domain/administration/project/ProjectUpdateWhitelistService.java b/.../com/mercedesbenz/sechub/domain/administration/project/ProjectUpdateWhitelistService.java
@@ -9,7 +9,6 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.error.NotFoundException;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
@@ -20,6 +19,7 @@
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageDataKeys;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
 import com.mercedesbenz.sechub.sharedkernel.messaging.ProjectMessage;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.project.UseCaseUpdateProjectWhitelist;
 import com.mercedesbenz.sechub.sharedkernel.validation.URIValidation;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;

diff --git a/...desbenz/sechub/domain/administration/scheduler/SchedulerAdministrationRestController.java b/...desbenz/sechub/domain/administration/scheduler/SchedulerAdministrationRestController.java
@@ -13,8 +13,8 @@
 
 import com.mercedesbenz.sechub.domain.administration.AdministrationAPIConstants;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.schedule.UseCaseAdminDisablesSchedulerJobProcessing;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.schedule.UseCaseAdminEnablesSchedulerJobProcessing;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.schedule.UseCaseAdminTriggersRefreshOfSchedulerStatus;

diff --git a/...cedesbenz/sechub/domain/administration/scheduler/SwitchSchedulerJobProcessingService.java b/...cedesbenz/sechub/domain/administration/scheduler/SwitchSchedulerJobProcessingService.java
@@ -4,14 +4,14 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessage;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessageFactory;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessageService;
 import com.mercedesbenz.sechub.sharedkernel.messaging.IsSendingAsyncMessage;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.schedule.UseCaseAdminDisablesSchedulerJobProcessing;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.schedule.UseCaseAdminEnablesSchedulerJobProcessing;
 

diff --git a/...edesbenz/sechub/domain/administration/scheduler/TriggerSchedulerStatusRefreshService.java b/...edesbenz/sechub/domain/administration/scheduler/TriggerSchedulerStatusRefreshService.java
@@ -4,13 +4,13 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessage;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessageFactory;
 import com.mercedesbenz.sechub.sharedkernel.messaging.DomainMessageService;
 import com.mercedesbenz.sechub.sharedkernel.messaging.IsSendingAsyncMessage;
 import com.mercedesbenz.sechub.sharedkernel.messaging.MessageID;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.schedule.UseCaseAdminDisablesSchedulerJobProcessing;
 
 import jakarta.annotation.security.RolesAllowed;

diff --git a/.../mercedesbenz/sechub/domain/administration/signup/SignupAdministrationRestController.java b/.../mercedesbenz/sechub/domain/administration/signup/SignupAdministrationRestController.java
@@ -14,8 +14,8 @@
 
 import com.mercedesbenz.sechub.domain.administration.AdministrationAPIConstants;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.signup.UseCaseAdminDeletesSignup;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.signup.UseCaseAdminListsOpenUserSignups;
 

diff --git a/...c/main/java/com/mercedesbenz/sechub/domain/administration/signup/SignupDeleteService.java b/...c/main/java/com/mercedesbenz/sechub/domain/administration/signup/SignupDeleteService.java
@@ -4,10 +4,10 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
 import com.mercedesbenz.sechub.sharedkernel.logging.AuditLogService;
 import com.mercedesbenz.sechub.sharedkernel.logging.LogSanitizer;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.signup.UseCaseAdminDeletesSignup;
 import com.mercedesbenz.sechub.sharedkernel.validation.UserInputAssertion;
 

diff --git a/.../mercedesbenz/sechub/domain/administration/status/StatusAdministrationRestController.java b/.../mercedesbenz/sechub/domain/administration/status/StatusAdministrationRestController.java
@@ -15,8 +15,8 @@
 
 import com.mercedesbenz.sechub.domain.administration.AdministrationAPIConstants;
 import com.mercedesbenz.sechub.sharedkernel.Profiles;
-import com.mercedesbenz.sechub.sharedkernel.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.Step;
+import com.mercedesbenz.sechub.sharedkernel.security.RoleConstants;
 import com.mercedesbenz.sechub.sharedkernel.usecases.admin.status.UseCaseAdminListsStatusInformation;
 
 import jakarta.annotation.security.RolesAllowed;