Skip to content

Commit 27e9fb6

Browse files
rjrudinMarkLogic Builder
authored andcommitted
DHFPROD-4158: Updated example to use a different privilege
"manage" apparently doesn't work because it's not directly inherited by data-hub-security-admin.
1 parent e246f75 commit 27e9fb6

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

examples/dhs-example/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ The ml-config and other-config directories will still be processed, but hub-inte
1818

1919
As of 5.2.0, a user with the data-hub-security-admin role is permitted to deploy roles that grant privileges that are
2020
inherited by the user performing the deployment. As an example of this, the
21-
src/main/ml-config/security/roles/custom-role1.json file defines a new role with the "manage" privilege, which is
21+
src/main/ml-config/security/roles/custom-role1.json file defines a new role with the "role-set-external-names" privilege, which is
2222
inherited by the data-hub-security-admin role.
2323

2424
Permitted resources can be deployed via the following task (assuming that gradle-dhs.properties defines the host and

examples/dhs-example/src/main/ml-config/security/roles/custom-role1.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,9 @@
33
"description": "Because data-hub-security-admin has the grant-my-privileges privilege, it can create roles that inherit privileges inherited by data-hub-security-admin",
44
"privilege": [
55
{
6-
"privilege-name": "manage",
6+
"privilege-name": "role-set-external-names",
77
"kind": "execute",
8-
"action": "http://marklogic.com/xdmp/privileges/manage"
8+
"action": "http://marklogic.com/xdmp/privileges/role-set-external-names"
99
}
1010
]
1111
}

0 commit comments

Comments
 (0)