Fixed #288: allow guest-acces, disallow updates, require app users only

[grtjn]

#288

Uncomment few lines in node-app.js, and you by-pass auth entirely. Streamlined default app-user stuff to make it work out of the box as Guest with rest-reader/writer privs..

[joemfb]

Could this be read from Roxy properties instead of concatenated?

[grtjn]

Probably, but sounds like a lot of complexity. And still not convinced Node should depend on Roxy configs. I'd prefer the other way round..

Keep in mind this piece of code is only executed at start of project, directly after executing Roxy new, so naming of default-user is reliable at that point. If you would want to make it fully dynamic, gulp serve and service scripts would have to read Roxy props too..

[grtjn]

Safe for slush generator, as the line is commented out in build.properties by default, but worth considering for the (new) gulp init-local/dev/prod..

[grtjn]

Leveraging the relatively new ml env info --format=json in gulpfile, but overkill for slushfile..

[grtjn]

I ran an elaborate test myself, but could use a test run from someone else to confirm. Had to streamline quite a bit..

[grtjn]

Using rest-reader/writer privs also requires making sure REST extensions and such get app-role permissions, or otherwise calls those REST extensions will fail. This means patching app_specific with something like:

  alias_method :original_deploy_rest, :deploy_rest
  def deploy_rest
    original_deploy_rest

    r = execute_query(%Q{
        xquery version "1.0-ml";

        for $uri in cts:uris()
        return (
            $uri,
            xdmp:document-set-permissions($uri, (
                xdmp:permission("#{@properties["ml.app-name"]}-role", "read"),
                xdmp:permission("#{@properties["ml.app-name"]}-role", "execute")
            ))
       )
      },
      { :db_name => @properties["ml.modules-db"] }
    )
    r.body = parse_json r.body
    logger.debug r.body
  end

[grtjn]

Decided to include a pre-made app_specific.rb in templates to solve this. Showcases some other nice gimmicks as well..

[grtjn]

Ran elaborate tests with this, merging now..

[grtjn]

This also fixed #415..

[grtjn]

This also fixes #246..

[grtjn]

This also fixes #240..