couchdb-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Wiki <wikidi...@apache.org>
Subject [Couchdb Wiki] Update of "Replication" by JanLehnardt
Date Tue, 03 Jan 2012 21:06:26 GMT
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Couchdb Wiki" for change notification.

The "Replication" page has been changed by JanLehnardt:
http://wiki.apache.org/couchdb/Replication?action=diff&rev1=38&rev2=39

Comment:
update for >= 1.2.0 system db security

  https://gist.github.com/832610  (from the author)
  
  http://docs.couchbase.org/couchdb-release-1.1/index.html#couchb-release-1.1-replicatordb
 (verifed by the author)
+ 
+ Since CouchDB 1.2.0, special security restrictions are in place for the replicator database:
+ 
+  * Users can only update replication documents they created themselves.
+ 
+  * Users that read replication documents by other user will not get shown passwords and
oath tokens used for authenticating replications.
+ 
+  * For all authenticated users, their username gets added to the `owner` field of the replication
document.
+ 
+  * Only server and database admins can create design docs and access views.
+ 
+  * Server and database admins can update any replication document.
  
  
  == New features introduced in CouchDB 1.2.0 ==

Mime
View raw message