Skip to main content

Securing MarkLogic Server

Insert

The insert capability provides a subset of the update capability. The insert capability provides the authority to add new content to the document. The insert capability by itself does not allow a user to change existing content or remove an existing document (for example, calls to xdmp:document-insert() and xdmp:document-delete() on an existing document fail). Furthermore, you need read capability on the document to perform actions that use any of the node insert functions (xdmp:node-insert-before(), xdmp:node-insert-after(), xdmp:node-insert-child()), as explained above in the description for update. Therefore, a permission with an insert capability must be paired with a permission with a read capability to be useful.