On 4/4/17 9:54 AM, Iker Esnaola wrote: > > Hello, > > > > I am trying to update my Graph by means of the SPARQL endpoint and the > following query: > > > > DELETE {?s rdf:type "A "} > INSERT {?s rdf:type "B" } > from <myGRAPH> > WHERE { ?s rdf:type "A"} > > > > I am getting the following error: Virtuoso 42000 Error SR186:SECURITY: > No permission to execute procedure > DB.DBA.SPARQL_MODIFY_BY_DICT_CONTENTS with user ID 107, group ID 107 > > > > After giving SPARQL_UPDATE permissions to the “SPARQL” user, there is > no such a problem and I am able to perform the query. > > > > However, my SPARQL endpoint is public so this is not a good practice. > > > > I have been looking for information in this matter but I didn’t find > anything decisive. Is there any possibility of login in the SPARQL > endpoint? I am thinking of some way of enabling certain users to > update the content (e.g. administrators) while leaving the rest of the > users with only query permissions. > > > > Thanks in advance, >
To cut a long story short, you will need attrtibute-based acls (ABAC) which are part of the commercial edition of Virtuoso [1]. If you don't want to exploit that degree of sophistication you can try role-based acls (RBAC) via our Graph Security feature. [1] https://medium.com/virtuoso-blog/web-logic-sentences-and-the-magic-of-being-you-e2a719d01f73 -- End to End Example re. Attributed-based access control [2] https://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtRDFGraphsSecurity -- Role-based Graph Security -- Regards, Kingsley Idehen Founder & CEO OpenLink Software (Home Page: http://www.openlinksw.com) Weblogs (Blogs): Legacy Blog: http://www.openlinksw.com/blog/~kidehen/ Blogspot Blog: http://kidehen.blogspot.com Medium Blog: https://medium.com/@kidehen Profile Pages: Pinterest: https://www.pinterest.com/kidehen/ Quora: https://www.quora.com/profile/Kingsley-Uyi-Idehen Twitter: https://twitter.com/kidehen Google+: https://plus.google.com/+KingsleyIdehen/about LinkedIn: http://www.linkedin.com/in/kidehen Web Identities (WebID): Personal: http://kingsley.idehen.net/dataspace/person/kidehen#this : http://id.myopenlink.net/DAV/home/KingsleyUyiIdehen/Public/kingsley.ttl#this
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Virtuoso-users mailing list Virtuoso-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/virtuoso-users