My guess is that the /framework/mvc/xqmvc.xqy document does not have execute
permissions for a role that the user running the app has. The xqmvc modules
are in the database, right? Try doing an
xdmp:document-get-permissions("/framework/mvc/xqmvc.xqy") and check the
permissions.
That at least is a place to start.
-Danny
From: [email protected]
[mailto:[email protected]] On Behalf Of SinghDang,
Balvinder (ELS-OXF)
Sent: Thursday, May 20, 2010 9:02 AM
To: [email protected]
Subject: [MarkLogic Dev General] Marklogic Security Issue
Hi All,
We are facing a strange issue in our project, any help from the gurus out there
is greatly appreciated
1. We have created a default-role and and app-role in the ML Security DB
2. App role is inheriting default-role
3. Modules are loaded with some modules having read and execute to default
role, and the rest of the modules having read and execute to app role
4. When we request access an application library module which is importing
the search i.e. import module namespace
search="http://marklogic.com/appservices/search"; at
"/MarkLogic/appservices/search/search.xqy";
1. The application throws the following error
XDMP-MODNOTFOUND: (err:XQST0059) xdmp:eval("import module namespace xqmvc-ctrlr
= "http://scholarsporta...";, (fn:QName("", "form-data"), map:map(<map:map
xmlns:xs="http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xmlns:map="http://marklogic.com/xdmp/map";><map:entry key="_f"><map:value
xsi:type="xs:string">render-form<...</map:map>)), <options
xmlns="xdmp:eval"><isolation>different-transaction</isolation><prevent-deadlocks>t...</options>)
-- Module C:\Program
Files\MarkLogic\Modules\MarkLogic\appservices\search\search.xqy not found
in /framework/mvc/xqmvc.xqy, on line 98,
in _controller("/application/controllers/search/search.xqy", "render-form")
[1.0-ml]
$controller-file = "/application/controllers/search/search.xqy"
$function = "render-form"
$import-declaration = "import module namespace xqmvc-ctrlr =
"http://scholarsporta...";
$form-data = map:map(<map:map xmlns:xs="http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xmlns:map="http://marklogic.com/xdmp/map";><map:entry key="_f"><map:value
xsi:type="xs:string">render-form<...</map:map>)
$function-call = "xqmvc-ctrlr:render-form(map:map(<map:map
xmlns:xs="http://w...";
in /framework/mvc/xqmvc.xqy, on line 180,
1. If I load the modules with read and execute to default role, the same code
works without any error (application default user is default-user having
default-role)
2. If I load the modules with read and execute to app role, the same code
works without any error (application default user is app-user having app-role)
Please help.
Thanks,
Balvinder
Elsevier Limited. Registered Office: The Boulevard, Langford Lane, Kidlington,
Oxford, OX5 1GB, United Kingdom, Registration No. 1982084 (England and Wales).
_______________________________________________
General mailing list
[email protected]
http://developer.marklogic.com/mailman/listinfo/general
