MarkLogic 10 Product Documentationsec.roleSetQuery
sec.roleSetQuery( role-name as String, capability as String, query as cts.query? ) as null
Summary
Sets the $capability query of a role with $role-name to $query.
| Parameters | |
|---|---|
| role-name | The name of a role. |
| capability | The name of the capability. |
| query | A query for the given capability of the role. |
Required Privileges
http://marklogic.com/xdmp/privileges/role-set-queries
Usage Notes
This function must be executed against the security database. If a role with name $role-name is not found, an error is raised.
Example
// execute this against the security database.
declareUpdate();
const sec = require('/MarkLogic/security.xqy');
sec.roleSetQuery(
"region-NA",
"read",
cts.elementQuery(xs.QName("metadata"), cts.elementWordQuery(xs.QName("region"),"NA"))
)
// Set the role query of the capability "read" for the role "region-NA".