Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Message-ID: <1113735450.232451268420787330.JavaMail.jira@brutus.apache.org>
Date: Fri, 12 Mar 2010 19:06:27 +0000 (UTC)
From: "mikeal (JIRA)" <jira@apache.org>
To: dev@couchdb.apache.org
Subject: [jira] Created: (COUCHDB-692) validation function failures do not
 stop _update document creation
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

validation function failures do not stop _update document creation
------------------------------------------------------------------

                 Key: COUCHDB-692
                 URL: https://issues.apache.org/jira/browse/COUCHDB-692
             Project: CouchDB
          Issue Type: Bug
            Reporter: mikeal
            Priority: Critical


I noticed a pretty serious bug working on js-registry.

"updates" : { "package", "function (doc, req) { return [{forbidden:\"cannot use this\", \"_id\":\"bad\"}, \"cannot use this\"] }" }, 
"validate_update_doc" : "function (newDoc, oldDoc, user) { if (newDoc.forbidden) { throw "this should fail" } "

What this should do is block the creation of the newDoc, but it doesn't, a new document with _id = "bad" is created. Even worse, if you don't have a doc id a document with an empty id is created.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.