Web Applications: permission handling

Hi everyone, With BaseX 9.0, permission handling in web applications will be further simplified. We have just finalized a new light-weight permission layer that allows you to: • attach permission strings to RESTXQ functions and • disallow evaluation of such functions via annotated security functions. More details can be found in the documentation [1]. Thanks to those who gave helpful feedback! A new snapshot is available [2]; the DBA has already been rewritten to take advantage of the new annotations. In future versions, we might provide built-in support for various authentication methods (LDAP, OAuth, etc.), and the permission layer could possibly be extended to the other BaseX APIs as well. Looking forward to your feedback, Christian [1] http://docs.basex.org/wiki/Permissions [2] http://files.basex.org/releases/latest/