Invalid permissions
Monday, 18 April 2011 · 3 messages
IN
Immanuel Normann18 Apr 2011 03:49 #
Hello,
I wanted to let a user insert nodes into a database. Three related questions about that:
1) why does the user need "CREATE" permissions and not just "WRITE" permissions?
2) why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works?
3) how could I let user manipulate (e.g. inserting a node) only a specific database?
Thanks for help
Immanuel
AW
Andreas Weiler18 Apr 2011 07:52 #
Hi Immanuel,
1) the user just needs the "WRITE" permission, everything else would be a bug. Maybe you could provide us an example.
2) grant create on <db> to <user> is an invalid command, because "CREATE" doesn't make sense on an existing database.
So the local permissions are just: none, read, write
global permissions: none, read, write, create, admin
3) You could remove global permissions and just give local "WRITE" permission to the user:
grant none to <user>
grant write on <db> to <user>
Now the user can just read/write on the specified database.
-- Andreas
Quoted text · Immanuel Normann · 13 lines
Am 18.04.2011 um 03:49 schrieb Immanuel Normann: > Hello, > I wanted to let a user insert nodes into a database. Three related questions about that: > 1) why does the user need "CREATE" permissions and not just "WRITE" permissions? > 2) why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works? > 3) how could I let user manipulate (e.g. inserting a node) only a specific database? > > Thanks for help > Immanuel > _______________________________________________ > BaseX-Talk mailing list > BaseX-Talk at mailman.uni-konstanz.de > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
AW
Andreas Weiler18 Apr 2011 09:58 #
Hi Immanuel,
i just checked your problem and i couldnt reproduce it, here is what i did:
Start the server as admin (with the flag -i) and execute the following steps:
create user test test
grant none to test
create database test <root/>
grant write on test to test
Now login as test and run the following:
open test
xquery insert node <test/> into root()
So it works for me,
Andreas
Quoted text · Andreas Weiler · 39 lines
Am 18.04.2011 um 07:52 schrieb Andreas Weiler: > Hi Immanuel, > > 1) the user just needs the "WRITE" permission, everything else would be a bug. > Maybe you could provide us an example. > > 2) grant create on <db> to <user> is an invalid command, because "CREATE" doesn't make > sense on an existing database. > So the local permissions are just: none, read, write > global permissions: none, read, write, create, admin > > 3) You could remove global permissions and just give local "WRITE" permission to the user: > > grant none to <user> > grant write on <db> to <user> > > Now the user can just read/write on the specified database. > > -- Andreas > > Am 18.04.2011 um 03:49 schrieb Immanuel Normann: > >> Hello, >> I wanted to let a user insert nodes into a database. Three related questions about that: >> 1) why does the user need "CREATE" permissions and not just "WRITE" permissions? >> 2) why does the pattern "grant create on <db> to <user>" yield the error "Invalid permissions specified", whereas "grant create to <user>" works? >> 3) how could I let user manipulate (e.g. inserting a node) only a specific database? >> >> Thanks for help >> Immanuel >> _______________________________________________ >> BaseX-Talk mailing list >> BaseX-Talk at mailman.uni-konstanz.de >> https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk > > _______________________________________________ > BaseX-Talk mailing list > BaseX-Talk at mailman.uni-konstanz.de > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
Written for BaseX 6.6. BaseX may have changed since: please check the current documentation.
⚡Generated with XQuery