Re: [basex-talk] RESTXQ and access blocking

2015-01-14 Thread France Baril
I'm reading this thread and I foresee a problem with our system. Would it be possible to enable/disable REST access on specific databases? For example, block access to our translation database (content being translated), but allow access to approved content (original content and approved

Re: [basex-talk] RESTXQ and access blocking

2015-01-14 Thread Lars Johnsen
Thanks - it worked out nicely! Just commented out the servlet-section on REST. Cheers, Lars 2015-01-14 15:57 GMT+01:00 Dirk Kirsten d...@basex.org: Hello Lars, You can disable the REST interface if you do not intend to use it (and you solely use RESTXQ). This can be done using your web

Re: [basex-talk] RESTXQ and access blocking

2015-01-14 Thread Dirk Kirsten
Hello Lars, You can disable the REST interface if you do not intend to use it (and you solely use RESTXQ). This can be done using your web server. In our default jetty-based HTTP server you can find the servlet mapping in WEB-INF/web.xml, where you can simply disable the servlet mapping for

Re: [basex-talk] RESTXQ and access blocking

2015-01-14 Thread Dirk Kirsten
Hello France, I guess the easiest solution would be to run REST with a user who only has access to the allowed databases. Another way could be blocking the appropriate REST calls for some specific databases (e.g. block http://my.url/rest/not-allowed-database). However, as an arbitrary XQuery