User Management - Revision history

CG at 18:39, 18 July 2022

2022-07-18T18:39:49Z

2021-02-03T07:30:42Z

db:create → user:create

2020-02-27T14:39:45Z

2019-04-10T14:57:56Z

2019-04-02T08:10:47Z

2016-08-02T16:39:56Z

XQuery

2016-08-02T16:39:18Z

Storage

2016-08-02T16:38:58Z

Storage

2016-08-02T16:37:51Z

2016-08-02T16:36:54Z

XQuery

@@ Line 1: / Line 1: @@
 This article is part of the [[Advanced User's Guide]]. The user management defines which permissions are required by a user to perform a database command or XQuery expression.
-Permissions are mostly relevant in the client/server architecture, as the [[GUI]] and the [[Command-Line Client]] is run with admin permissions. There are a few exceptions such as the [[XQuery Module#xquery:eval|xquery:eval]] function: Its execution scope can also be limited by specifying a permission.
+Permissions are mostly relevant in the client/server architecture, as the [[GUI]] and the [[Command-Line Client]] is run with admin permissions. There are a few exceptions such as the {{Function|XQuery|xquery:eval}} function: Its execution scope can also be limited by specifying a permission.
 Please take care of usual security measures: ensure that your password will not end up in your bash history, avoid sending passwords via ordinary REST requests, etc.

@@ Line 52: / Line 52: @@
 '''Create user 'test' with no permissions:'''
-<code>db:create('test', 'top-secret')</code>
+<code>user:create('test', 'top-secret')</code>
 '''Show detailed information about user 'test':'''

@@ Line 15: / Line 15: @@
 and override global permissions.
-[[File:perms.png|none|thumb|403px|Permissions hierarchy]]
+[[File:perms.png|Permissions hierarchy]]
 User names must follow the [[Valid Names|valid names constraints]], and the database patterns must follow the [[Commands#Glob_Syntax|Glob Syntax]].

@@ Line 66: / Line 66: @@
 The permission file {{Code|users.xml}} is stored in the database directory. This file can be manually edited; it will be parsed once when BaseX is started.
-Salted SHA256 hashes are used for authentication (the current timestamp will be used as salt). Additionally, digest hashes are used in the client/server architecture and the [[Clients|Language Bindings]], and in the [[Web Application|HTTP Context]] if the [[Options#AUTHMETHOD|AUTHMETHOD]] is set to {{Code|Digest}}.
+Salted SHA256 hashes are used for authentication (the current timestamp will be used as salt). Additionally, digest hashes are used in the client/server architecture and the [[Clients|Language Bindings]], and in the [[Web Application|HTTP Context]] if {{Option|AUTHMETHOD}} is set to {{Code|Digest}}.
 =Changelog=
 Revised in Version 8.0.

@@ Line 1: / Line 1: @@
 This article is part of the [[Advanced User's Guide]]. The user management defines which permissions are required by a user to perform a database command or XQuery expression.
-Permissions are mostly relevant in the client/server architecture, as the [[Standalone Mode]] and the [[GUI]] is run with admin permissions.
+Permissions are mostly relevant in the client/server architecture, as the [[GUI]] and the [[Command-Line Client]] is run with admin permissions. There are a few exceptions such as the [[XQuery Module#xquery:eval|xquery:eval]] function: Its execution scope can also be limited by specifying a permission.
 Please take care of usual security measures: ensure that your password will not end up in your bash history, avoid sending passwords via ordinary REST requests, etc.

← Older revision		Revision as of 16:39, 2 August 2016
Line 48:		Line 48:

	==XQuery==		==XQuery==
		+
		+	The available user functions are listed in the [[User Module]]:

	'''Create user 'test' with no permissions:'''		'''Create user 'test' with no permissions:'''

@@ Line 63: / Line 63: @@
 =Storage=
-The permission file is located in the '''database directory'''; it is called {{Code|users.xml}}. This file can be manually edited; it will be parsed when BaseX is started.
+The permission file {{Code|users.xml}} is stored in the database directory. This file can be manually edited; it will be parsed once when BaseX is started.
-Both local and global permissions are stored in the same file. '''Glob patterns''' are used for local database permissions. '''Salted sha256''' hashes are used for authentication (the current timestamp will be used as salt). Additionally, '''digest''' hashes are used in the client/server architecture and the [[Clients|Language Bindings]], and in the [[Web Application|HTTP Context]] if the [[Options#AUTHMETHOD|AUTHMETHOD]] is set to {{Code|Digest}}.
+'''Salted sha256''' hashes are used for authentication (the current timestamp will be used as salt). Additionally, '''digest''' hashes are used in the client/server architecture and the [[Clients|Language Bindings]], and in the [[Web Application|HTTP Context]] if the [[Options#AUTHMETHOD|AUTHMETHOD]] is set to {{Code|Digest}}.
 =Changelog=
 Revised in Version 8.0.

@@ Line 59: / Line 59: @@
 '''Show detailed information about user 'test':'''
-<code>&gt; XQUERY user:list-details()[@name = 'test']</code>
+<code>user:list-details()[@name = 'test']</code>
 '''Drop user 'test':'''
-<code>&gt; XQUERY user:drop('test')</code>
+<code>user:drop('test')</code>
 =Changelog=
 Revised in Version 8.0.