docs(skills): warn that create-or-modify microflow drops Allowed roles (CE0106) - #793
docs(skills): warn that create-or-modify microflow drops Allowed roles (CE0106)#793ront85 wants to merge 1 commit into
Conversation
…s (CE0106) CREATE OR MODIFY MICROFLOW rebuilds the microflow from MDL, but MDL has no syntax for the "Allowed roles" (AllowedModuleRoles) security property, so a round-trip silently resets it to empty. Under Production/Prototype security with Check Security on, any microflow triggered from a page/button/nanoflow/ navigation/published service then fails validation with CE0106. Neither `describe microflow` nor `SHOW ACCESS ON MICROFLOW` surfaces this property, so the loss is easy to miss until the build breaks. Adds to the mendix skills: - write-microflows.md: new Common Pitfall mendixlabs#8 (capture roles from the .mxunit before editing, re-grant with `grant execute` after), a Validation Checklist item, and a CE0106 row in the Common Studio Pro Errors table. - manage-security.md: a note under Microflow Access that `grant execute` is what sets Allowed roles and is the CE0106 remedy after a round-trip. Docs only; no code changes.
|
Why not fix the bug, the dropped roles? |
|
Closing without merging — the underlying bug is already fixed in code, so this doc warning would be stale/unnecessary guidance.
Re-filing this as a manual workaround (re-run |
2 participants
Problem
CREATE OR MODIFY MICROFLOWrebuilds a microflow from its MDL, but MDL has no syntax for the Allowed roles (AllowedModuleRoles) security property — so a round-trip silently resets it to empty. Under Production/Prototype security with Check Security on, any microflow triggered from a page/button/nanoflow/navigation/published service then fails validation with CE0106 ("At least one allowed role must be selected…").It's easy to miss because neither
describe microflownorSHOW ACCESS ON MICROFLOWsurfaces this property — the loss only shows up when the Studio Pro build breaks. Hit this in the wild editing an existing action microflow.Changes (docs only)
.mxunitbefore editing, re-grant withgrant executeafter), a Validation Checklist item, and a CE0106 row in the Common Studio Pro Errors table.grant executeis what sets Allowed roles and is the CE0106 remedy after a round-trip.No code changes.