MarkLogic Server 11.0 Product Documentation

sec:role-set-query

sec:role-set-query(
   $role-name as xs:string,
   $capability as xs:string,
   $query as cts:query?
) as empty-sequence()

Summary

Sets the $capability query of a role with $role-name to $query.

Required Privileges

Usage Notes

This function must be executed against the security database. If a role with name $role-name is not found, an error is raised.

Example

(: execute this against the security database :)
xquery version "1.0-ml"; 
import module namespace sec = "http://marklogic.com/xdmp/security" 
  at "/MarkLogic/security.xqy"; 
  
sec:role-set-query(
  "region-NA", 
  "read", 
  cts:element-query(xs:QName("metadata"), cts:element-word-query(xs:QName("region"),"NA"))
)

(: Set the role query of the capability "read" for the role "region-NA":)