Skip to main content

Securing MarkLogic Server

Protecting XQuery and JavaScript Functions with Privileges

Execute privileges provide authorization control for executing XQuery and JavaScript functions. MarkLogic Server provides three ways to protect XQuery functions:

  • Built-in execute privileges, created by MarkLogic Server, control access to protected functions such as xdmp:document-load().

  • Custom execute privileges, which you create using the Admin Interface or the security function in the security.xqy module, control access to functions you write.

  • Amps, which temporarily amplify a user’s authority by granting the authority to execute a single, specific function. You can only amp a function in a library module that is stored in the MarkLogic Server modules database.

This section describes how to use these protections.

In this section: