Re: [Exist-development] security refactoring

[Adam R. <ad...@ex...>]

>> How is this any different to the current 'guest' user?
>
> Current "guest" account can be used by user (authenticate), I do miss
> something before user introduce oneself. This account should not be
> allowed to create anything @database, but only limited read permissions.

Sure but this problem is really due to the default permission on /db.
Arguably you just need to tighten these up and then the guest user
would be fine.

> --
> Cheers,
>
> Dmitriy Shabanov
>



-- 
Adam Retter

eXist Developer
{ United Kingdom }
ad...@ex...
irc://irc.freenode.net/existdb