From dev-return-10101-apmail-couchdb-dev-archive=couchdb.apache.org@couchdb.apache.org Thu Jun 03 15:23:21 2010 Return-Path: Delivered-To: apmail-couchdb-dev-archive@www.apache.org Received: (qmail 89966 invoked from network); 3 Jun 2010 15:23:21 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 3 Jun 2010 15:23:21 -0000 Received: (qmail 45163 invoked by uid 500); 3 Jun 2010 15:23:20 -0000 Delivered-To: apmail-couchdb-dev-archive@couchdb.apache.org Received: (qmail 45104 invoked by uid 500); 3 Jun 2010 15:23:20 -0000 Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@couchdb.apache.org Delivered-To: mailing list dev@couchdb.apache.org Received: (qmail 45096 invoked by uid 99); 3 Jun 2010 15:23:20 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 15:23:20 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.22] (HELO thor.apache.org) (140.211.11.22) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Jun 2010 15:23:18 +0000 Received: from thor (localhost [127.0.0.1]) by thor.apache.org (8.13.8+Sun/8.13.8) with ESMTP id o53FMv7d000270 for ; Thu, 3 Jun 2010 15:22:57 GMT Message-ID: <7699822.160411275578577128.JavaMail.jira@thor> Date: Thu, 3 Jun 2010 11:22:57 -0400 (EDT) From: "Jan Lehnardt (JIRA)" To: dev@couchdb.apache.org Subject: [jira] Closed: (COUCHDB-660) _temp_view should be accessible only to admins In-Reply-To: <1374993398.392511266600508062.JavaMail.jira@brutus.apache.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/COUCHDB-660?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jan Lehnardt closed COUCHDB-660. -------------------------------- Fix Version/s: 0.11 (was: 0.12) Resolution: Fixed This has been fixed in the previous release. > _temp_view should be accessible only to admins > ---------------------------------------------- > > Key: COUCHDB-660 > URL: https://issues.apache.org/jira/browse/COUCHDB-660 > Project: CouchDB > Issue Type: Bug > Components: HTTP Interface > Affects Versions: 0.11 > Environment: trunk / 0.11 > Reporter: Filipe Manana > Fix For: 0.11 > > Attachments: couchdb-_temp_view_auth.patch > > > As discussed in the auth roadmap mail, sent by Chris to @dev, the _temp_view URI should be usable only by admins. > The following 2 lines patch does the check. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.