With {{Version|9.0}} of BaseX, a light-weight permission layer has been added that simplifies permission checks a lot:
* permission strings can be attached to RESTXQ functions can be annotated with flexible permission strings, and
* permission functions ensure that access will only be granted if a client has sufficient permissions.