[MarkLogic Dev General] Xdmp:default-permissions() not working?

Michael Blakeley michael.blakeley at marklogic.com
Tue Feb 24 09:17:26 PST 2009


Geert,

Can you be more explicit about "the user-id option"?

The cq window should tell you what user you're logged in as, in the 
title bar. For example, my copy of cq (svn HEAD) in firefox 3.0.6 says 
"cq - writer at 127.0.0.1:8000", and I get the results I expect from 
xdmp:default-permissions():

<sec:permission xmlns:sec="http://marklogic.com/xdmp/security">
   <sec:capability>insert</sec:capability>
   <sec:role-id>18086402793777567391</sec:role-id>
</sec:permission>
<sec:permission xmlns:sec="http://marklogic.com/xdmp/security">
   <sec:capability>update</sec:capability>
   <sec:role-id>18086402793777567391</sec:role-id>
</sec:permission>
<sec:permission xmlns:sec="http://marklogic.com/xdmp/security">
   <sec:capability>read</sec:capability>
   <sec:role-id>18086402793777567391</sec:role-id>
</sec:permission>
<sec:permission xmlns:sec="http://marklogic.com/xdmp/security">
   <sec:capability>read</sec:capability>
   <sec:role-id>16214968982484730623</sec:role-id>
</sec:permission>

-- Mike

On 2009-02-23 23:46, Geert Josten wrote:
> Hi there,
>
> I am running MarkLogic Server 4.0-1 on a WinXP laptop. I have added a user to the security database in MarkLogic Server using the Admin interface and the describe feature tells me that this user has default permissions (inherited from a custom defined role). But an empty sequence is returned, when calling the xdmp:default-permissions() as this user. Also, when inserting documents, permissions are not automatically assigned because of this, making the document inaccessible for the user itself.
>
> (Reproduced with cq using xdmp:eval and the user-id option..
>
> Is there an obvious reason this goes wrong? Or is it something that has been fixed in the latest releases? I failed to find release notes on the latest patch versions. Are these available somewhere?
>
> Kind regards,
> Geert
>
>
> Drs. G.P.H. Josten
> Consultant
>
>
> http://www.daidalos.nl/
> Daidalos BV
> Source of Innovation
> Hoekeindsehof 1-4
> 2665 JZ Bleiswijk
> Tel.: +31 (0) 10 850 1200
> Fax: +31 (0) 10 850 1199
> http://www.daidalos.nl/
> KvK 27164984
> De informatie - verzonden in of met dit emailbericht - is afkomstig van Daidalos BV en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onbedoeld hebt ontvangen, verzoeken wij u het te verwijderen. Aan dit bericht kunnen geen rechten worden ontleend.
>
>
>
> _______________________________________________
> General mailing list
> General at developer.marklogic.com
> http://xqzone.com/mailman/listinfo/general



More information about the General mailing list