[Exist-development] And yet another security/Ant issue....addendum

[Andrzej J. T. <an...@ch...>]

BTW, I create the myuser like this (before I change the admin password from empty):

<exist:adduser failonerror="false" uri="${exist.url}/xmlrpc/db" user="admin" password=""
name="myuser" secret="${password}" home="/db" primaryGroup="dba"/>

That should make myuser a DBA, right?

Logging into the admin web page shows that the user is not a DBA, since it can't do a database
shutdown.  But the user list (both in the admin web page and in the Java client) shows myuser as a
member of the dba group.

....A

> I use an ant task to run an xquery as follows:
> 
> <exist:xquery queryfile="${temp.dir}/importData.xql" outputproperty="importResults"
> uri="${exist.url}/xmlrpc/db" user="myuser" password="${password}"> </exist:xquery>
> 
> but it the fails with the following:
> 
> BUILD FAILED
> /home/andrzej/build.xml:1747: XMLDB exception caught while executing query: Permission denied,
> calling user 'myuser' must be a DBA to call this function. [at line 75, column 23, source: String]
> 
> The line in the xquery that is failing is:
> 
> 	let $list   := file:directory-list( $dir, "*.xml" )
> 
> which requires DBA permissions as expected.
> 
> The problem is that the ant task was initiated using user "myuser" which is part of the dba
> group...and thus should be a DBA, right?
> 
> This used to work fine....but is now broken with the new security stuff.
> 
> Any idea why myuser isn't being seen as having dba permissions when executing an xquery using the
> ant task?


-- 
Andrzej Taramina
Chaeron Corporation: Enterprise System Solutions
http://www.chaeron.com