XQuery APIs

These built-in functions are available to help manage element level security:

• sec:protect-path()

• sec:unprotect-path()

• sec:remove-path()

• sec:path-set-permissions()

• sec:path-add-permissions()

• sec:path-get-permissions()

• sec:path-remove-permissions()

• sec:query-rolesets-collection()

• sec:security-path-namespace()

• sec:query-roleset()

• sec:query-rolesets()

• sec:query-rolesets-id()

• sec:add-query-rolesets()

• sec:remove-query-rolesets()

• sec:protected-paths-collection()

With the appropriate permissions, protected path content can be modified using these node update APIs:

• xdmp:node-replace()

• xdmp:node-delete()

• xdmp:node-insert-after()

• xdmp:node-insert-before()

• xdmp:node-insert-child()

These two helper functions can be used to search for protected paths:

• xdmp:node-query-rolesets()

• xdmp:database-node-query-rolesets()