MLE-31887 Refactor xdmp privileges in test-rest-writer - #1967
Merged
Conversation
Adding back the unprotected-uri and unprotected- collections privilege removed as part of xdmp-login removal
Adding "xdmp:xslt-invoke", "xdmp:xslt-eval", and "xdmp:value" to test-rest-writer role to fix tests. These were removed when java-test-xdmp-login.json was deleted.
Moved privileges `xdmp:invoke`, `xdmp:xslt-invoke`, `xdmp:xslt-eval`, and `xdmp:value` from test-rest-writer role to new role test-invoke. Created new user writer-no-default-invoke to use new role test-invoke. Updated AbstractOpicUpdateTest.java to use new user writer-no-default-invoke since it needs the `xdmp:invoke` privilege
jonmille
requested review from
RitaChen609,
ngodugu-marklogic,
rjdew-progress and
rjrudin
as code owners
August 12, 2026 13:26
rjrudin
previously approved these changes
Aug 12, 2026
RitaChen609
previously approved these changes
Aug 12, 2026
jonmille
changed the base branch from
MLE-31877-Revert-xdmp-login-changes
to
develop
August 12, 2026 15:50
jonmille
dismissed stale reviews from RitaChen609 and rjrudin
August 12, 2026 15:50
The base branch was changed.
RitaChen609
approved these changes
Aug 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes:
xdmp:invoke,xdmp:xslt-invoke,xdmp:xslt-eval, andxdmp:valuefrom test-rest-writer role to new roletest-invoke.writer-no-default-invoketo use new roletest-invoke.writer-no-default-invokesince it needs thexdmp:invokeprivilegeTests Requiring xdmp privileges:
xsltTransformWithoutParam() – com.marklogic.client.test.rows.TransformDocTest— XSLT stylesheet invoked by URI; needs xdmp:xslt-invokecom.marklogic.client.ForbiddenUserException: Local message: User is not allowed to apply resource at rows/update. Server Message: You do not have permission to this method and URL.xsltTransformWithParam() – com.marklogic.client.test.rows.TransformDocTest— XSLT stylesheet invoked by URI; needs xdmp:xslt-invokecom.marklogic.client.ForbiddenUserException: Local message: User is not allowed to apply resource at rows/update. Server Message: You do not have permission to this method and URL.testUsingFromParamAndSchematron() – com.marklogic.client.test.rows.ValidateDocTest— schematron compiled to XSLT (xdmp:xslt-invoke + xdmp:xslt-eval) then written via fromParam (xdmp:value)com.marklogic.client.ForbiddenUserException: Local message: User is not allowed to apply resource at rows/update. Server Message: You do not have permission to this method and URL.https://progresssoftware.atlassian.net/browse/MLE-31877
Reference PR: #1966