Non-Admin user and db:system()//repopath
Monday, 1 August 2016 · 2 messages
MG
Maximilian Gärber1 Aug 2016 15:28 #
Hi,
this returns nothing (as non-admin), but I noticed you can still list any folders above.
In my case the empty string left to having a path with a single slash '/' which translated to the root of the drive that basex was installed. I got the complete contents of the drive with our query [1].
The way it is right now, I see no reason why
db:system()//repopath returns nothing.
Regards,
Max
Happened with BaseX: 8.4.4
[1] https://github.com/axxepta/project-argon/blob/develop/src/main/resources/api/list-repo.xqCG
Christian Grün1 Aug 2016 22:44 #
Hi Max,
The functions of the File Module are now restricted to users with admin permissions.
As you can do virtually anything with XQuery, I’m pretty sure that there are a bunch of other functions and modules that should be restricted to admin users. Feel free to name them if you stumble upon some more.
Thanks
Christian
Quoted text · Maximilian Gärber · 22 lines
On Mon, Aug 1, 2016 at 3:28 PM, Maximilian Gärber <mgaerber at arcor.de> wrote: > Hi, > > this returns nothing (as non-admin), but I noticed you can still list > any folders above. > > In my case the empty string left to having a path with a single slash > '/' which translated to the root of the drive that basex was > installed. I got the complete contents of the drive with our query > [1]. > > The way it is right now, I see no reason why db:system()//repopath > returns nothing. > > Regards, > Max > > > Happened with BaseX: 8.4.4 > > > [1] https://github.com/axxepta/project-argon/blob/develop/src/main/resources/api/list-repo.xq
Written for BaseX 8.5. BaseX may have changed since: please check the current documentation.
⚡Generated with XQuery