Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Message-ID: <314632128.1233076859755.JavaMail.jira@brutus>
Date: Tue, 27 Jan 2009 09:20:59 -0800 (PST)
From: "Matt Goodall (JIRA)" <jira@apache.org>
To: dev@couchdb.apache.org
Subject: [jira] Commented: (COUCHDB-228) Futon access couchdb's config
In-Reply-To: <268509049.1233064379793.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/COUCHDB-228?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12667728#action_12667728 ] 

Matt Goodall commented on COUCHDB-228:
--------------------------------------

By "unnecessarily", I merely meant that database.html doesn't always need to access the config. For instance, if viewPath is one of _all_docs or _design_docs there's no need to populate the view editor at all. However, it would be really nice if the view editor was disabled/simplified if the user isn't in the 'admins' list.

Never tried this, but it ought to be possible to suppress the auth prompt by first sending a HEAD request to the view's design doc and inspecting the response's "Allow" header. If PUT is an allowed method then the view is editable and a full editor view can be displayed, including the list of languages. The CouchDB backend then just needs to send "Allow: GET, HEAD" for non-admins and "Allow: GET, HEAD, PUT" admins. You never know, it might work ;-).

> Futon access couchdb's config
> -----------------------------
>
>                 Key: COUCHDB-228
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-228
>             Project: CouchDB
>          Issue Type: Bug
>          Components: Administration Console
>    Affects Versions: 0.9
>            Reporter: Matt Goodall
>            Assignee: Christopher Lenz
>
> Futon tries to access the couchdb config (/_config/query_servers) unnecessarily, causing a basic auth request if there are any "admins" configured.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.