Hi,

Just investigating user handling, I am using the latest snapsnap.

I start basexhttp with  -U guest -P guest 

and/or I set org.basex.user and org.basex.password in web.xml

Sometimes I have created a user ( guest with password guest) and permission none via dba. Sometimes I have deleted the guest user. 

In all cases I appear to be able to run restxq queries and in those queries read from databases.

Am I misunderstanding something here?

/Andy