diff --git a/src/main/java/net/geedge/asw/module/sys/controller/SysAuthController.java b/src/main/java/net/geedge/asw/module/sys/controller/SysAuthController.java
index b0e0498..1839031 100644
--- a/src/main/java/net/geedge/asw/module/sys/controller/SysAuthController.java
+++ b/src/main/java/net/geedge/asw/module/sys/controller/SysAuthController.java
@@ -14,9 +14,7 @@ import net.geedge.asw.module.sys.service.ISysAuthService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.*;
 
-import java.util.List;
 import java.util.Map;
-import java.util.stream.Collectors;
 
 @RestController
 @RequestMapping("/api/v1")
@@ -44,12 +42,13 @@ public class SysAuthController {
 		// payload
 		jwt.setPayload("sub", userEntity.getUserName());
 
-		Map<String, Object> permissions = authService.userPermissions();
-
-		String roles = ((List<String>) T.JSONUtil.getByPath(T.JSONUtil.parse(permissions), "records.role.name")).stream()
-				.distinct()
-				.collect(Collectors.joining(","));
-		jwt.setPayload("roles", roles);
+//		Map<String, Object> permissions = authService.userPermissions();
+//
+//		String roles = ((List<String>) T.JSONUtil.getByPath(T.JSONUtil.parse(permissions), "records.role.name")).stream()
+//				.distinct()
+//				.collect(Collectors.joining(","));
+		// TODO asw and opensearch role mapping
+		jwt.setPayload("roles", "admin");
 
 		Long eff = Long.valueOf(jwt.getPayload("eff").toString());
 		jwt.setPayload("exp", eff == -1L ? -1 : (eff / 1000));