[MarkLogic Dev General] amp roles

[Danny Sokolsky]

You can either remove the role testdocs from superuser (then grant it
again when you are done) or change the permissions on the document (for
example with xdmp:document-add|remove|set-permissions).  

 

If you add more roles to the document, you can accomplish this with
amps, too.  Amps let a user temporarily run with more roles.   Amps can
give extra roles, but cannot take away roles, so you need to set up your
roles accordingly.

 

Does that answer your question?

 

-Danny 

 

From: general-bounces at developer.marklogic.com
[mailto:general-bounces at developer.marklogic.com] On Behalf Of Paul M
Sent: Thursday, December 06, 2007 6:50 AM
To: general at developer.marklogic.com
Subject: [MarkLogic Dev General] amp roles

 

Hi All:

Lets say I have the following:
Two documents
doc 1 has the following: role/permission
proddocs, read
doc 2 has the following role/permission
testdocs, read

I have a user called superuser that has the roles proddocs and testdocs.
Now I do a cts:search(fn:doc() ...
Both documents doc1 and doc2 will be returned. Is it possible to turn
off a role, say testdocs, temporarily, so that only doc1 is returned for
superuser?



 

________________________________

Never miss a thing. Make Yahoo your homepage.
<http://us.rd.yahoo.com/evt=51438/*http:/www.yahoo.com/r/hs>  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://xqzone.marklogic.com/pipermail/general/attachments/20071206/77ac430e/attachment.html