It looks like 4.1-1 is indeed requiring the with-namespaces privilege to run search:search. So for now, you will indeed need to assign that privilege to anyone using your application (you can just assign them the app-builder role, which has the privilege).
-Danny From: [email protected] [mailto:[email protected]] On Behalf Of Danny Sokolsky Sent: Tuesday, August 04, 2009 9:20 AM To: General Mark Logic Developer Discussion Subject: [MarkLogic Dev General] RE: search:search requires execute privilege Hi Lisa, If all you are doing is a search:search, I don't think you should need the execute privilege. If you are using an application generated from Application Builder, then you do need it. The pre-defined role app-builder has that privilege, so if your application needs it, you can give that role to users of the app. The xdmp:with-namespaces privilege allows you to execute the xdmp:with-namespaces function, which is similar to xdmp:value, in that you pass in an expression to be evaluated and, in the case of with-namespaces, you can pass in namespace prefix bindings as well. The xdmp:with-namespaces function is useful when passing in function values as arguments to functions (using xdmp:function). While the with-namespaces function is protected with a privilege, in most applications it is pretty safe to give this privilege to your users. Hope that helps, -Danny From: [email protected] [mailto:[email protected]] On Behalf Of Lisa Liddle Sent: Monday, August 03, 2009 1:38 PM To: [email protected] Subject: [MarkLogic Dev General] search:search requires execute privilege I've found that for the default user for our app to be able to run search:search the user's role needs to have the execute privilege xdmp:with-namespaces. What does this privilege provide and why is it needed for the search function? Thanks, Lisa NOTICE: This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.
_______________________________________________ General mailing list [email protected] http://xqzone.com/mailman/listinfo/general
