Test It Out
When John and Pari perform a read or a node-update against the database, the results are shown in the following table:
Document |
Metadata |
User with |
User with |
|---|---|---|---|
|
feature |
John |
|
|
price |
Pari |
Pari |
|
feature |
John |
|
|
price |
Pari |
Pari |
|
|
John, Pari, Mike |
John, Pari |
|
|
John, Pari |
John, Pari |
Mike is not able to read /doc6.xml although he has the can-read role. The access to /doc6.xml is further restricted by the user queries.