Hello, I wanted to let a user insert nodes into a database. Three related questions about that: 1) why does the user need "CREATE" permissions and not just "WRITE" permissions? 2) why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works? 3) how could I let user manipulate (e.g. inserting a node) only a specific database? Thanks for help Immanuel
Hi Immanuel, 1) the user just needs the "WRITE" permission, everything else would be a bug. Maybe you could provide us an example. 2) grant create on <db> to <user> is an invalid command, because "CREATE" doesn't make sense on an existing database. So the local permissions are just: none, read, write global permissions: none, read, write, create, admin 3) You could remove global permissions and just give local "WRITE" permission to the user: grant none to <user> grant write on <db> to <user> Now the user can just read/write on the specified database. -- Andreas Am 18.04.2011 um 03:49 schrieb Immanuel Normann:
Hello, I wanted to let a user insert nodes into a database. Three related questions about that: 1) why does the user need "CREATE" permissions and not just "WRITE" permissions? 2) why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works? 3) how could I let user manipulate (e.g. inserting a node) only a specific database?
Thanks for help Immanuel _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
Hi Immanuel, i just checked your problem and i couldnt reproduce it, here is what i did: Start the server as admin (with the flag -i) and execute the following steps: create user test test grant none to test create database test <root/> grant write on test to test Now login as test and run the following: open test xquery insert node <test/> into root() So it works for me, Andreas Am 18.04.2011 um 07:52 schrieb Andreas Weiler:
Hi Immanuel,
1) the user just needs the "WRITE" permission, everything else would be a bug. Maybe you could provide us an example.
2) grant create on <db> to <user> is an invalid command, because "CREATE" doesn't make sense on an existing database. So the local permissions are just: none, read, write global permissions: none, read, write, create, admin
3) You could remove global permissions and just give local "WRITE" permission to the user:
grant none to <user> grant write on <db> to <user>
Now the user can just read/write on the specified database.
-- Andreas
Am 18.04.2011 um 03:49 schrieb Immanuel Normann:
Hello, I wanted to let a user insert nodes into a database. Three related questions about that: 1) why does the user need "CREATE" permissions and not just "WRITE" permissions? 2) why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works? 3) how could I let user manipulate (e.g. inserting a node) only a specific database?
Thanks for help Immanuel _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
_______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
participants (2)
-
Andreas Weiler -
Immanuel Normann