Hello Erik,

hopefully our web.xml file included with BaseX (as part of the DBA) clears things up for you: https://github.com/BaseXdb/basex/blob/master/basex-api/src/main/webapp/WEB-INF/web.xml#L28

Cheers

Dirk

For RESTXQ auth its unclear to me what the entry is to preserve older versions of basex auth. Thank!

see...

http://docs.basex.org/wiki/Web_Application

• Authentication was readded to RESTXQ. As a consequence, you need to specify the admin user in your web.xml file if you want to preserve the behavior of older versions of BaseX.
• In turn, if users are defined in the web.xml file, no passwords must be specified anymore.
• The server-side authentication method, and default users, are now enforced and cannot be overwritten by client.

-- 
Dirk Kirsten, BaseX GmbH, http://basexgmbh.de
|-- Firmensitz: Blarerstrasse 56, 78462 Konstanz
|-- Registergericht Freiburg, HRB: 708285, Geschäftsführer:
|   Dr. Christian Grün, Dr. Alexander Holupirek, Michael Seiferle
`-- Phone: 0049 7531 91 68 276, Fax: 0049 7531 20 05 22