Hello, I wanted to let a user insert nodes into a database. Three related questions about that: 1) why does the user need "CREATE" permissions and not just "WRITE" permissions? 2) why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works? 3) how could I let user manipulate (e.g. inserting a node) only a specific database?
Thanks for help Immanuel
Hi Immanuel,
1) the user just needs the "WRITE" permission, everything else would be a bug. Maybe you could provide us an example.
2) grant create on <db> to <user> is an invalid command, because "CREATE" doesn't make sense on an existing database. So the local permissions are just: none, read, write global permissions: none, read, write, create, admin
3) You could remove global permissions and just give local "WRITE" permission to the user:
grant none to <user> grant write on <db> to <user>
Now the user can just read/write on the specified database.
-- Andreas
Am 18.04.2011 um 03:49 schrieb Immanuel Normann:
Hello, I wanted to let a user insert nodes into a database. Three related questions about that:
- why does the user need "CREATE" permissions and not just "WRITE" permissions?
- why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works?
- how could I let user manipulate (e.g. inserting a node) only a specific database?
Thanks for help Immanuel _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
Hi Immanuel,
i just checked your problem and i couldnt reproduce it, here is what i did:
Start the server as admin (with the flag -i) and execute the following steps:
create user test test grant none to test create database test <root/> grant write on test to test
Now login as test and run the following:
open test xquery insert node <test/> into root()
So it works for me, Andreas
Am 18.04.2011 um 07:52 schrieb Andreas Weiler:
Hi Immanuel,
- the user just needs the "WRITE" permission, everything else would be a bug.
Maybe you could provide us an example.
- grant create on <db> to <user> is an invalid command, because "CREATE" doesn't make
sense on an existing database. So the local permissions are just: none, read, write global permissions: none, read, write, create, admin
- You could remove global permissions and just give local "WRITE" permission to the user:
grant none to <user> grant write on <db> to <user>
Now the user can just read/write on the specified database.
-- Andreas
Am 18.04.2011 um 03:49 schrieb Immanuel Normann:
Hello, I wanted to let a user insert nodes into a database. Three related questions about that:
- why does the user need "CREATE" permissions and not just "WRITE" permissions?
- why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works?
- how could I let user manipulate (e.g. inserting a node) only a specific database?
Thanks for help Immanuel _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
basex-talk@mailman.uni-konstanz.de