From 989751b2bfbb9f04a6c765dfe199ce2dff14e677 Mon Sep 17 00:00:00 2001
From: Jonathan Miller <jonmille@progress.com>
Date: Wed, 12 Aug 2026 14:18:39 -0400
Subject: [PATCH] MLE-31901 Remove xdmp-login

Removed `xdmp-login` from rest-evaluator role.
Deleted rest-login role, since it only had the `xdmp-login` privilege.
Removed the rest-login role from rest-reader user.
Deleted rest-transform-user user, since it is not used anywhere.
---
 .../main/ml-config/security/roles/rest-evaluator.json |  5 -----
 .../src/main/ml-config/security/roles/rest-login.json | 11 -----------
 .../main/ml-config/security/users/rest-reader.json    |  3 +--
 .../ml-config/security/users/rest-transform-user.json | 10 ----------
 4 files changed, 1 insertion(+), 28 deletions(-)
 delete mode 100644 test-app/src/main/ml-config/security/roles/rest-login.json
 delete mode 100644 test-app/src/main/ml-config/security/users/rest-transform-user.json

diff --git a/test-app/src/main/ml-config/security/roles/rest-evaluator.json b/test-app/src/main/ml-config/security/roles/rest-evaluator.json
index 3da382b0..d53ed513 100644
--- a/test-app/src/main/ml-config/security/roles/rest-evaluator.json
+++ b/test-app/src/main/ml-config/security/roles/rest-evaluator.json
@@ -51,11 +51,6 @@
       "action": "http://marklogic.com/xdmp/privileges/xdmp-get-session-field",
       "kind": "execute"
     },
-    {
-      "privilege-name": "xdmp-login",
-      "action": "http://marklogic.com/xdmp/privileges/xdmp-login",
-      "kind": "execute"
-    },
     {
       "privilege-name": "unprotected-collections",
       "action": "http://marklogic.com/xdmp/privileges/unprotected-collections",
diff --git a/test-app/src/main/ml-config/security/roles/rest-login.json b/test-app/src/main/ml-config/security/roles/rest-login.json
deleted file mode 100644
index 1e6308d0..00000000
--- a/test-app/src/main/ml-config/security/roles/rest-login.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "role-name": "rest-login",
-  "description": "Role granting xdmp:login privilege needed for REST transform invocations with different-transaction isolation",
-  "privilege": [
-    {
-      "privilege-name": "xdmp-login",
-      "action": "http://marklogic.com/xdmp/privileges/xdmp-login",
-      "kind": "execute"
-    }
-  ]
-}
diff --git a/test-app/src/main/ml-config/security/users/rest-reader.json b/test-app/src/main/ml-config/security/users/rest-reader.json
index 7ca1398e..f13df931 100644
--- a/test-app/src/main/ml-config/security/users/rest-reader.json
+++ b/test-app/src/main/ml-config/security/users/rest-reader.json
@@ -4,7 +4,6 @@
   "password": "x",
   "role": [
     "rest-reader",
-    "rest-extension-user",
-    "rest-login"
+    "rest-extension-user"
   ]
 }
diff --git a/test-app/src/main/ml-config/security/users/rest-transform-user.json b/test-app/src/main/ml-config/security/users/rest-transform-user.json
deleted file mode 100644
index 029dd5c7..00000000
--- a/test-app/src/main/ml-config/security/users/rest-transform-user.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "user-name": "rest-transform-user",
-  "description": "rest-transform-user user",
-  "password": "x",
-  "role": [
-    "rest-transform-internal",
-    "rest-reader",
-    "rest-login"
-  ]
-}