MarkLogic 12 Product Documentation

sec.roleSetQuery

sec.roleSetQuery(
   role-name as String,
   capability as String,
   query as cts.query?
) as null

Summary

Sets the $capability query of a role with $role-name to $query.

Required Privileges

Usage Notes

This function must be executed against the security database. If a role with name $role-name is not found, an error is raised.

Example

// execute this against the security database.
declareUpdate(); 
const sec = require('/MarkLogic/security.xqy');

sec.roleSetQuery(
  "region-NA", 
  "read",
  cts.elementQuery(xs.QName("metadata"), cts.elementWordQuery(xs.QName("region"),"NA"))
)

// Set the role query of the capability "read" for the role "region-NA".