Security audit and features

[adamfowleruk]

• Enterprise features
  • Set security as relevant to the process document at each step in the process - irrelevant, sorted by amps and internal role
  • Especially around assignment - N/A
  • Allow a set security permissions on documents feature - postponed until MarkLogic specific steps in later sprints
  • Ensure installation creates relevant roles and permission sets
  • Creation of roles - (Requires mlnodetools enhancement)
  • creation of privileges - (Requires mlnodetools enhancement)
  • creation of amps - (Requires mlnodetools enhancement)
  • settings of modules db document security - DONE (mlnodetools enhancement)
  • setting of rest extension security - RFE logged
  • Ensure rest services honour the 'locked by' guarantee - not relevant, handled by internal privileges

[adamfowleruk]

Also need mljsadmin capture to capture the security roles, privileges, amps in use.

[adamfowleruk]

Amps all in place and working. All roles confirmed working. Just debugging individual calls now. (Seems to be more an issue with transferring to invoking functions rather than security changes).