Probably better to create an amp for it: http://docs.marklogic.com/guide/admin/security#id_81246
An amp is basically a single function that runs with a different role, something like a setuid program. -- Mike On 3 Oct 2012, at 07:09 , Kalinosky, Mary wrote: > Well, what works is giving the security role to the default user for the > application, but I’m not sure if that’s really a good idea. Anyone know of > serious risks associated with granting the security role to the default app > user? I’m new to MarkLogic. > > Thanks, > Mary > > > > From: [email protected] > [mailto:[email protected]] On Behalf OfHarry B. > Sent: Tuesday, October 02, 2012 6:14 PM > To: MarkLogic Developer Discussion > Subject: Re: [MarkLogic Dev General] roles, privileges > > Are you invoking against the security database? That's important, plus the > function should be amped to have the security role. > > > On Tue, Oct 2, 2012 at 4:01 PM, Kalinosky, Mary <[email protected]> > wrote: > I am trying to use the functions sec:user-set-password-extra() and sec: > user-get-password-extra() in my web application, but I keep getting > errors—“User does not exist” but the user actually does exist because the > sec:create-user() function worked with no errors, as did the xdmp:login() > function and I can see the two users I’ve created programmatically in the > MarkLogic administration panel under Security -> Users. I did make sure that > the default user for the application had permissions for these functions to > no avail. I have imported the security module: > import module namespace sec = "http://marklogic.com/xdmp/security"; at > "/MarkLogic/security.xqy"; > I cannot think of anything else I need to include or set in the MarkLogic > administration panel. Anyone know how I can get these (and other) functions > to work? I have MarkLogic 5.0-2 installed on my localhost. > > Thanks, > Mary Kalinosky > eProducts > Thieme Medical Publishers > 333 Seventh Avenue, New York, NY 10001 USA > Ruedigerstrasse 14, 70469 Stuttgart, Germany > > Email: [email protected] > www.thieme.com > Thieme eNeurosurgery: > The world's most comprehensive neurosurgical resource online. > > > _______________________________________________ > General mailing list > [email protected] > http://developer.marklogic.com/mailman/listinfo/general > > > _______________________________________________ > General mailing list > [email protected] > http://developer.marklogic.com/mailman/listinfo/general _______________________________________________ General mailing list [email protected] http://developer.marklogic.com/mailman/listinfo/general
