Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of b.candler@pobox.com
 designates 208.72.237.25 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=date:from:to
	:subject:message-id:references:mime-version:content-type
	:in-reply-to; q=dns; s=sasl; b=CgE/zIIOpiP5xhw+7iaT8mepSmHGBa1Vg
	jBS2lChz9YVL0g39UcZ3MWLwwJeSJ4Bil/XWP+ZdB5MymkS/xMT9fc6VQrPzHVU+
	mj7/AvLxPfsVZ3B2+AZ9D+luUP+fDa9DeOliFC3xn72lg4MaJCSVuIdodAabf+RN
	17QII22QrM=
Date: Fri, 5 Feb 2010 22:42:25 +0000
From: Brian Candler <B.Candler@pobox.com>
To: dev@couchdb.apache.org
Subject: Re: DB ACLs (was Re: 0.11 Release / Feature Freeze for 1.0)
Message-ID: <20100205224225.GA8463@uk.tiscali.com>
References: <e282921e1002030921g53af1711r3b46ebe31f4cb38b@mail.gmail.com>
 <20100203212426.GA10515@uk.tiscali.com> <015a01caa529$3d24e230$b76ea690$@com>
 <2C591A9F-55E4-49DD-A3E3-9BA075EAE633@apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <2C591A9F-55E4-49DD-A3E3-9BA075EAE633@apache.org>
User-Agent: Mutt/1.5.20 (2009-06-14)

I think it's time to declare my interest.

The CouchDB-backed application I've been working on is now available here:
http://www.deploy2.net/

It's basically an IP address database / network asset inventory. CouchDB has
been a great match for this, especially some funky map-reduce logic for
indexing IPv4 and IPv6 addresses, and having separate database instances for
logical separation.

At the moment, CouchDB sits entirely behind a Rails app, which handles the
user authentication and authorization - that is, enforcing which databases
you can use, and whether you have read/update/admin rights to them.

If I can push enough of this logic down into CouchDB, then that would let me
expose CouchDB itself to the Internet.  That would give people a fast
JSON-over-HTTP API for extending the service externally.  It would also let
me move more of the UI logic up into the browser, and the option of moving
towards a CouchApp model.

So that's my particular reason for having an interest in how the ACL
features end up in 0.11.  I'd be happy to describe how my current security
model works and how it might be mapped down to CouchDB, if anyone's
interested.

(And if anyone's interested in the app itself, please feel free to try it
out and send your comments to me off-list)

Regards,

Brian.