Use privileges over roles in security scaffolding

[dmcassel]

Describe the RFE

Exercising Privilege to Restrict Content talks about using privileges (like http://marklogic.com/xdmp/privileges/rest-reader) over roles (like rest-reader). I believe that's generally accepted guidance. Assuming so, I propose changing ml-gradle's scaffolding to set up the default roles to use privileges over roles.

[grtjn]

I think the title of this issue got it backwards.. :)

[dmcassel]

You're right, @grtjn! fixed

[rjrudin]

Removing from 4.3, but will get to this some day. PR would be appreciated!

[grtjn]

I'm short of spare time at the moment, but who knows. Do you have pointers to relevant code?

[rjrudin]

I like doing this, as privileges really are the way to go. Can rethink the generated roles as well. No possibility for a breaking change here as the files are generated and then a user is free to modify them however they see fit.

[rjrudin]

See marklogic/ml-app-deployer#490