Can't create working user account after export/import with excludeClass=All

[jsajdak]

orientdb v.3.2.24
We are trying to create a template version of a database using export/import. At the end of the process, I cannot log in with a new user that is created in database. My apologies if this question format is incorrect.
// export the database schema

./console.sh
connect remote:127.0.0.1/sourcedb admin admin
export database /mnt/export/my_base.gz -excludeAll -includeSchema=true -includeRecords=False -includeIndexDefinitions=true
export database /mnt/export/my_Classes.gz -excludeAll -includeClass="ORole OUser OIdentity Some Other Custom Classes"

// create and import

create database plocal:/mnt/data/orientdb_files/databases/newdb
import database /mnt/export/my_base.gz -merge=True // tried this without the -merge=True also
import database /mnt/export/my_Classes.gz -merge=True

// fix broken edges
REPAIR DATABASE --fix-graph -v
// at this point, i can use console and Studio to connect to the db using the root identity in server-config.xml
// create a dedicated db user
CREATE USER testuser IDENTIFIED BY password ROLE admin
// also tried
insert into OUser set name = 'testuser2', password = 'password', status = 'ACTIVE', roles = (select from ORole where name = 'admin')
// The user is showing up now in the Security tab in Studio with the correct role and is marked Active.
// In both cases now when I try to log in with this new user (console or Studio), this error is logged to orientdb.err

2024-04-30 13:21:23:739 SEVER Internal server error:
 [ONetworkProtocolHttpDb]
java.lang.NullPointerException
        at com.orientechnologies.orient.core.metadata.security.OSecurityPolicyImpl.getIdentity(OSecurityPolicyImpl.java:18)
        at com.orientechnologies.orient.core.metadata.security.OImmutableSecurityPolicy.<init>(OImmutableSecurityPolicy.java:19)
        at com.orientechnologies.orient.core.metadata.security.OImmutableRole.lambda$new$0(OImmutableRole.java:41)
        at java.base/java.util.HashMap$EntrySet.forEach(HashMap.java:1040)
        at com.orientechnologies.orient.core.metadata.security.OImmutableRole.<init>(OImmutableRole.java:41)
        at com.orientechnologies.orient.core.metadata.security.OImmutableUser.<init>(OImmutableUser.java:40)
        at com.orientechnologies.orient.core.db.document.ODatabaseDocumentEmbedded.internalOpen(ODatabaseDocumentEmbedded.java:263)
        at com.orientechnologies.orient.core.db.document.ODatabaseDocumentEmbedded.internalOpen(ODatabaseDocumentEmbedded.java:245)
        at com.orientechnologies.orient.core.db.OrientDBEmbedded.open(OrientDBEmbedded.java:551)
        at com.orientechnologies.orient.distributed.db.OrientDBDistributed.open(OrientDBDistributed.java:320)
        at com.orientechnologies.orient.core.db.OrientDBEmbedded.open(OrientDBEmbedded.java:476)
        at com.orientechnologies.orient.distributed.db.OrientDBDistributed.open(OrientDBDistributed.java:305)
        at com.orientechnologies.orient.server.OServer.openDatabase(OServer.java:852)
        at com.orientechnologies.orient.server.OServer.openDatabase(OServer.java:845)
        at com.orientechnologies.orient.server.network.protocol.http.command.OServerCommandAuthenticatedDbAbstract.authenticate(OServerCommandAuthenticatedDbAbstract.java:194)
        at com.orientechnologies.orient.server.network.protocol.http.command.OServerCommandAuthenticatedDbAbstract.beforeExecute(OServerCommandAuthenticatedDbAbstract.java:136)
        at com.orientechnologies.orient.server.network.protocol.http.command.get.OServerCommandGetConnect.beforeExecute(OServerCommandGetConnect.java:55)
        at com.orientechnologies.orient.server.network.protocol.http.ONetworkProtocolHttpAbstract.service(ONetworkProtocolHttpAbstract.java:239)
        at com.orientechnologies.orient.server.network.protocol.http.ONetworkProtocolHttpAbstract.execute(ONetworkProtocolHttpAbstract.java:800)
        at com.orientechnologies.common.thread.OSoftThread.run(OSoftThread.java:68)

I assume that something about the exported db is causing this, but I'm not sure what? Any ideas?

[jsajdak]

I might have figured this out. There is another security related class that needs to be exported. OSecurityPolicy

The export/import process is less than perfect, and from what I can tell does not follow documentation. I noticed that when I do the first part of the import (schema and defintions) and include -merge=True, all of the db records from OUsers and ORoles are deleted. This is in conflict with the -merge usage documentation here: https://orientdb.com/docs/3.1.x/console/Console-Command-Import.html that says

"-merge Defines whether you want to merge the import with the data already in the current database. When turned off, the default, the import overwrites current data, with the exception of security classes, (ORole, OUser, OIdentity), which it always preserves. This feature was introduced in version 1.6.1."

Adding the additional class to the original export has allowed me to create and use a new user in the DB
export database /mnt/export/my_Classes.gz -excludeAll -includeClass="ORole OUser OIdentity OSecurityPolicy Some Other Custom Classes"