project-lux / lux-marklogic

Code, issues, and resources related to LUX MarkLogic
Other
3 stars 2 forks source link

#149: facilitate and document multi-tenant environments #153

Closed brent-hartwig closed 4 days ago

brent-hartwig commented 1 month ago

Primary change was to the security roles:

  1. Deleted the lux-nobody role.
  2. Deleted the lux-admin role.
  3. Deleted the lux-ml-admin role.
  4. Remaining roles now incorporate the value of the mlAppName property in their names.

Deleted roles may be manually deleted after deployment.

Recommend not deleting other roles, specifically ones that documents grant permissions to; else a reload will be necessary.

Lots of documentation changes.

Replaced hard-coded instances of database names.

Property changes which will need to propagate to the environment- and tenant-specific properties files:

  1. Renamed luxContentDatabase to tenantContentDatabase
  2. Renamed luxModulesDatabase to tenantModulesDatabase
  3. Changed the value of mlDataPermissions from "lux-endpoint-consumer,read,lux-writer,update" to "lux-reader,read,lux-writer,update"
  4. Introduced backupEnabled
brent-hartwig commented 4 days ago

This needs to be re-done due to #192 moving the modules as well as updating some of the same documentation.