Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of jchris@gmail.com designates
 209.85.221.21 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:sender:in-reply-to:references:date
         :x-google-sender-auth:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        b=bhNHJmh7B5pfO5R3f3EcsPTMHYiyM24ROjPWiDF1jBlyOMzvuotcaTrt1zrWla8nph
         ENlE/IDdWGELNoz1xG1qYAlPf+67fnq93yD2WwNu6/xv4T8EdqMO7co9QWVZIHAmOTi0
         dSpR0XzvJHP87ctexxQgdYEQvIRYbZOC6JsgA=
MIME-Version: 1.0
Sender: jchris@gmail.com
In-Reply-To: <74F5F8C1-EEB0-40D5-934C-8479743B8166@apache.org>
References: <49999A45.9040302@diskware.net>
	 <74F5F8C1-EEB0-40D5-934C-8479743B8166@apache.org>
Date: Mon, 16 Feb 2009 13:39:59 -0800
Message-ID: <e282921e0902161339w1065c173lfd58e83dd7ebf23a@mail.gmail.com>
Subject: Re: Partial replication -orelse- sending interpreted data to another
	server
From: Chris Anderson <jchris@apache.org>
To: dev@couchdb.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

On Mon, Feb 16, 2009 at 10:02 AM, Damien Katz <damien@apache.org> wrote:
>
> Therefore the answer is to not distinguish between replicated updates and
> direct updates. Instead enforce same security rules either way. This user
> can update this document with these values, or he can't. Doesn't matter if
> it's replicated or direct.
>

This pretty much describes the way I understand it as well. This makes
the constraints on validation functions interesting. Under what
circumstances should they ensure that the documents author-id matches
the saving user? Will the previous_rev always be available at
replication, as it is in the function signature?

Validation functions make me want a distinction between document
creation, and subsequent updates.

>
> Timeouts suck, but so does everything else.
>

classic Damien.

I'm glad we're talking about this. Distributed identity is a tough
problem, and validation / security plays a central role in that.

Chris

-- 
Chris Anderson
http://jchris.mfdz.com